misp-circl-feed/feeds/circl/stix-2.1/01e8868d-48ae-41aa-8516-ea5a303758b8.json

{
    "type": "bundle",
    "id": "bundle--01e8868d-48ae-41aa-8516-ea5a303758b8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:23:31.000Z",
            "modified": "2021-06-19T07:23:31.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--01e8868d-48ae-41aa-8516-ea5a303758b8",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:23:31.000Z",
            "modified": "2021-06-19T07:23:31.000Z",
            "name": "Netfilter Rootkit Samples - F. Roth - Google sheet + expansion",
            "published": "2021-06-19T07:27:39Z",
            "object_refs": [
                "observed-data--f37dea30-31e2-433b-a5a7-496bbc29ac07",
                "url--f37dea30-31e2-433b-a5a7-496bbc29ac07",
                "observed-data--01758ee5-c2dc-4efd-be6e-047cfaadbb8a",
                "url--01758ee5-c2dc-4efd-be6e-047cfaadbb8a",
                "indicator--ed183e3e-ac50-4ba7-b340-b7cef8292189",
                "indicator--08c1c0b9-3f26-44b5-9181-1bbb71a9b921",
                "indicator--54cced0a-cc7c-41ba-890d-b043db623bab",
                "indicator--da79e5e2-3944-4de3-84c3-5a59a16fb3fd",
                "indicator--5e1a1253-df3d-4d7c-aaa2-36db9ed411f1",
                "indicator--48bba73b-ad9f-47d4-8c75-b4f0dfa77c22",
                "indicator--9c23f0ba-8a41-464a-9bab-60fe4ec0034d",
                "indicator--7bbad130-f1f4-4b17-bb04-3d4d7d6bfc37",
                "indicator--66cc5e31-e702-41bc-ad3d-c7d4e6f363df",
                "indicator--17464b7e-b2f4-4c40-b4a7-acde8e505e20",
                "indicator--8182373a-9d26-4be4-a029-209b05806b3e",
                "indicator--67c2f5e9-cb76-4e8a-b758-f5b944e1cebf",
                "indicator--4c53521f-ba6a-4919-a7f5-1a486177bce3",
                "indicator--110ba31a-bcfb-4b6d-b365-3bea15e6bc6f",
                "indicator--28b4a43e-ed8b-435a-9e3b-d7fb6b69ebd7",
                "indicator--7d7df2f7-091a-44b2-a91b-4ea03d806a22",
                "indicator--a770c83e-0eb5-4442-aa3a-19a38f0f94ad",
                "indicator--468c9831-66c2-465b-8e97-aa2cfae5ca25",
                "observed-data--cb2ad8d2-4513-4824-98af-2417ede9f9be",
                "file--538fd0cb-d095-5a45-b311-c04ce8e7791d",
                "observed-data--c234d4d9-40e1-48a7-ba2c-0b5f007a4663",
                "file--faa06b9c-cf5c-5f94-b066-1c11d658258d",
                "observed-data--f41bb4be-9919-43b6-9196-0840d368ee1a",
                "file--bd5e4742-0223-5297-adc9-5a0d18aa448f",
                "observed-data--64bed6a7-3297-4789-ac29-49c73b493235",
                "file--127e79c1-76d1-5672-9412-d0edd90b1d99",
                "observed-data--73fe839d-d8b3-4b19-8df5-e075319f39cf",
                "file--fd2177a1-9176-5869-b199-9f8baca59774",
                "observed-data--14cbcece-f046-4ffc-9558-8a1bbc704211",
                "file--bd5e4742-0223-5297-adc9-5a0d18aa448f",
                "observed-data--2c0b5972-cd00-4f8a-9e8a-cb31b9914593",
                "file--5078cef2-64fb-5b7c-9194-3566536e6c00",
                "observed-data--8d7a063c-54d3-492a-ad81-5352128577a7",
                "file--016b55ea-6462-51ba-b868-932818db01f4",
                "observed-data--83630b45-1bf6-46fc-b17d-3a4c69127899",
                "file--2ba7efeb-43ba-58ec-b9fe-76bf8c92b957",
                "observed-data--2a138470-fe21-460e-835d-0fc839b2a9a3",
                "file--127e79c1-76d1-5672-9412-d0edd90b1d99",
                "observed-data--adca75b8-b784-410d-abd9-4b589bccf3df",
                "file--3366f255-2a49-5470-b397-6e35dc413a51",
                "observed-data--3d608d86-3642-4eaf-93b5-f9a2e464d0e3",
                "file--bd301ee5-60e6-556b-94ca-84510d7bc8ba",
                "observed-data--a9ef8fca-738e-436c-8664-130419d87650",
                "file--b65af11e-0995-5704-9392-cb52403d5c2a",
                "observed-data--4badc42f-32ae-464d-bb86-d335c70e8821",
                "file--ed52a7d9-24c3-502d-b4c6-7d2e1c286a03",
                "observed-data--03846d30-1141-4004-9f4c-cce033977a00",
                "file--03698891-97a7-569b-a302-85a2ec308d63",
                "observed-data--fb4648ae-f09b-444c-b713-50e55353621d",
                "file--83b1eee8-a95a-5ae1-bfff-9b6adeb014cd",
                "observed-data--eeb9a762-1710-454d-8d57-178ab5e76839",
                "file--3f6d7cb4-fe61-5056-af6f-ded4af854c8e",
                "x-misp-object--6321c3b7-2f5c-42bc-9678-3404093fcc86",
                "x-misp-object--e382fa8a-ec6b-42f2-9aa9-d0c67d3ce31c",
                "x-misp-object--a5122353-0bad-4b08-9755-48619da51f61",
                "x-misp-object--d20843ec-7a04-401b-909e-c26ebca453c2",
                "x-misp-object--c3389c56-14a2-49ff-a14e-a9cf391c07ef",
                "x-misp-object--67ee881e-d39f-42fb-a99d-5c55ca19a6bf",
                "x-misp-object--47b82d50-d85e-48c2-a3c9-3d34d0f9dcdb",
                "x-misp-object--5bcc2973-c2ab-4e94-9fa6-c7e7ec195fae",
                "x-misp-object--69b9552b-6d64-4b76-a0a9-dc0f90cd6bb8",
                "x-misp-object--2332dcdc-e184-4d02-8df1-e00055e7c435",
                "x-misp-object--fa1b96f7-95f4-41a7-8282-d51ea35a003a",
                "x-misp-object--d40bd6a2-0eb5-4796-b699-dffc2be4b431",
                "x-misp-object--d7bf8eb3-19e9-4aad-92b8-3a95c884e22d",
                "x-misp-object--c41067d8-f1e0-4a79-b653-b1de3a333983",
                "x-misp-object--d54701ff-0998-4d1d-a226-52968b38688e",
                "x-misp-object--5460049c-12dc-4c6b-ad1b-574ee6e27b46",
                "x-misp-object--8ac5b696-de49-428d-8edc-8ac677efef52",
                "x-misp-object--8688dd97-17cc-426c-99a8-663fb002ae49",
                "x-misp-object--0e9b987d-c99f-483c-9bf8-40d0adb31ba7",
                "x-misp-object--e92bb5ad-f7e0-4f31-a7a2-8091fa441d02",
                "x-misp-object--ae6ea4c4-1136-41b1-a103-b760a5d6b949",
                "x-misp-object--98c6cb34-b6c8-46d0-a6ff-c5c01732510a",
                "x-misp-object--86fb9914-7d7b-4236-9abd-9d102ce95d08",
                "x-misp-object--bc94cea5-59b0-49c6-b478-db6deb6213ee",
                "x-misp-object--244e9eec-ff34-4fd9-9899-5259e99af7f1",
                "x-misp-object--c4f4dbf3-50b0-40bf-b658-9775ffec4b0d",
                "x-misp-object--d09fb46e-5fa5-49a2-86dd-f3d8d1804c8b",
                "x-misp-object--e6358f45-c3fa-44be-ab85-eb8ae2b92b26",
                "x-misp-object--94756020-94fb-42da-ac3c-9307d2670cc4",
                "x-misp-object--e85cde67-3817-48d8-b6ed-a1415aec0e57",
                "x-misp-object--07a39763-3d47-44d3-bf12-fec30f348026",
                "x-misp-object--1fa704f1-5526-4c00-98ad-970a36b2b688",
                "x-misp-object--bdfcfd96-ec37-44e2-b012-6729b188db11",
                "x-misp-object--5a0ff8c4-9323-474c-8f79-6f56e78b57fc",
                "x-misp-object--a13b139c-8971-44c6-bd15-771d74eef813",
                "x-misp-object--0c46da1e-551f-4952-b183-0bf6281bae5d",
                "x-misp-object--c13b7e6b-312e-4ad8-bfcb-0ca5d14c40c4",
                "x-misp-object--9f405895-ce3c-457d-93a3-572d4c91dff4",
                "x-misp-object--763f4304-eed1-4c21-956f-2cbcc23e338d",
                "x-misp-object--695b2e91-223f-48cf-abda-0b224cd0dbe0",
                "x-misp-object--63384292-3560-4fa2-8a58-2c7f60f64260",
                "x-misp-object--11687ce6-7ff4-4aab-a60b-39ae2517d112",
                "x-misp-object--3b50a303-b6bc-455d-bf36-3ebd14302773",
                "x-misp-object--7e34aa06-bdea-47f4-8831-8df457b51504",
                "x-misp-object--a7655859-ee97-4f41-b84e-2e1fcb0205b2",
                "x-misp-object--304b08a9-d17b-41b7-803f-9c572aac0bd3",
                "x-misp-object--2d0875b8-37f8-4c74-a96c-0bab0a77af8b",
                "x-misp-object--62f7447c-fc39-4d03-8172-ec14eaa04460",
                "x-misp-object--04314631-c3a6-48e8-bb9b-6d5bd11dabc0",
                "x-misp-object--70c9a0a2-55e7-4801-a1eb-38428b7753d0",
                "x-misp-object--d7b4fe9a-b4f7-47fc-980f-a832d5436af0",
                "x-misp-object--1567f95b-65c3-4730-bc4d-93bc73d5892d",
                "x-misp-object--020e7d50-df08-4474-ae41-7f5120f0e7de",
                "x-misp-object--5762f80a-2219-4fa7-b847-5d16c739f152",
                "x-misp-object--3573f36a-2d32-42d2-bf5f-2d91a580510e",
                "x-misp-object--eee305b5-1d33-4751-8438-e4e425dce7cd",
                "x-misp-object--81b3754b-947e-4508-abe9-c9485907355d",
                "x-misp-object--5ac0e594-a97e-459e-822e-a5817e4a7164",
                "x-misp-object--4a858930-96b7-495e-9d9c-70ead6e7652c",
                "x-misp-object--ac495c0b-7c85-42b5-af1c-5448b40f5987",
                "x-misp-object--df11c33f-30d2-4c05-b727-bd223e59296e"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "malware_classification:malware-category=\"Rootkit\"",
                "type:OSINT",
                "osint:lifetime=\"perpetual\"",
                "osint:certainty=\"50\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--f37dea30-31e2-433b-a5a7-496bbc29ac07",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:18:51.000Z",
            "modified": "2021-06-19T07:18:51.000Z",
            "first_observed": "2021-06-19T07:18:51Z",
            "last_observed": "2021-06-19T07:18:51Z",
            "number_observed": 1,
            "object_refs": [
                "url--f37dea30-31e2-433b-a5a7-496bbc29ac07"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f37dea30-31e2-433b-a5a7-496bbc29ac07",
            "value": "https://docs.google.com/spreadsheets/d/1FYgBmJH8MOli99oIqRsIHJA2XzI3aSdAOb9mZmqj_q0/edit#gid=1028909258"
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--01758ee5-c2dc-4efd-be6e-047cfaadbb8a",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:19:59.000Z",
            "modified": "2021-06-19T07:19:59.000Z",
            "first_observed": "2021-06-19T07:19:59Z",
            "last_observed": "2021-06-19T07:19:59Z",
            "number_observed": 1,
            "object_refs": [
                "url--01758ee5-c2dc-4efd-be6e-047cfaadbb8a"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--01758ee5-c2dc-4efd-be6e-047cfaadbb8a",
            "value": "https://twitter.com/struppigel/status/1405483373280235520"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--ed183e3e-ac50-4ba7-b340-b7cef8292189",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:47.000Z",
            "modified": "2021-06-19T07:15:47.000Z",
            "pattern": "[file:hashes.MD5 = 'a57e4e3a3fa46bbdbc9d803283af3479' AND file:hashes.SHA1 = '4ede7f018c317ddc6a5f8f935f917621668cb1ec' AND file:hashes.SHA256 = 'f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca' AND file:hashes.SHA512 = '96d6af8643dffe45a35c367b4eed292dffe0ad6cce9da197c547d856ab6e77b4b8f85bd3375c7d21194599a47d956b7c5f448ea148dd47efad854f0fe0fefa27' AND file:hashes.SSDEEP = '768:y1ZqCQKy8IYdfWiUelR36ihR6nmRYs5ZjSyrNi7fb:yNyq+4lRX6IH5vi7T' AND file:name = 'f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca' AND file:size = '57232' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--08c1c0b9-3f26-44b5-9181-1bbb71a9b921",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:49.000Z",
            "modified": "2021-06-19T07:15:49.000Z",
            "pattern": "[file:hashes.MD5 = 'cb34374f1b5fb771076872c6b14b7501' AND file:hashes.SHA1 = '118f688c30a2f6c2d1feb955f53ce4acf3086b3b' AND file:hashes.SHA256 = 'e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37' AND file:hashes.SHA512 = '6d853b6a191c6277e54f661ae50fa7421e8dd8d9c7b55b928aaa320cc61baed57b3d8d9d728dc9e3b096b04a3de3f9e7914d8b04a30dc2c956b3d65b981a08ea' AND file:hashes.SSDEEP = '768:8WetQRPOQaniqkpY0O5w8dBxmT9yWU3jSPyyihNfVARbpn:8WXOQwi6wEBxmTSp3Epn' AND file:name = 'e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37' AND file:size = '50592' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--54cced0a-cc7c-41ba-890d-b043db623bab",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:50.000Z",
            "modified": "2021-06-19T07:15:50.000Z",
            "pattern": "[file:hashes.MD5 = '1c3db7002523e1acd621c90701c694ae' AND file:hashes.SHA1 = 'aee092fd31772d33932a7a02dd2d73ede67f7db0' AND file:hashes.SHA256 = 'd64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe' AND file:hashes.SHA512 = 'e94cd7fa788fa2f828dd40fe096b25655d7b8fe9fd948c5b53f6c30039ca0b9c309ebf8619c0de6988ef5efb4db0b0683c9ddc63ad200aa5e88b8f01a9294f1b' AND file:hashes.SSDEEP = '1536:HL9RWXOQwi6wEBxmTSp3EpoNyq+4lRX6IHOSyOVi77:rLKOQwNOT+eFq+4lAvOi7' AND file:name = 'd64f906376f21677d0585e93dae8b36248f94be7091b01fd1d4381916a326afe' AND file:size = '115712' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--da79e5e2-3944-4de3-84c3-5a59a16fb3fd",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:51.000Z",
            "modified": "2021-06-19T07:15:51.000Z",
            "pattern": "[file:hashes.MD5 = 'da6b25206a29c8ac9a8cbb4be5d3875c' AND file:hashes.SHA1 = '0e23cd5f100a035bd5ad521a6ad40454fda084c7' AND file:hashes.SHA256 = 'd0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540' AND file:hashes.SHA512 = '22da1f71f92ae3ecd81bdbffa81f1d44c4d1b06c4533d293c02bd159a68539015a162f2b1a835142d06bf5f6d3460adac39643479d93d5171701866401ad9835' AND file:hashes.SSDEEP = '384:rxNt/Iu30i3X2GjTJmlglwP74b14gHRN7aW0R1lnNfq:rxLIu3GIglNP749Ilfq' AND file:name = 'd0a03a8905c4f695843bc4e9f2dd062b8fd7b0b00103236b5187ff3730750540' AND file:size = '20864' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5e1a1253-df3d-4d7c-aaa2-36db9ed411f1",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:52.000Z",
            "modified": "2021-06-19T07:15:52.000Z",
            "pattern": "[file:hashes.MD5 = '400c1c6312f99e4640077994bbfaedde' AND file:hashes.SHA1 = '657a875554b075eb7f2d314bbbe967c789624b30' AND file:hashes.SHA256 = 'cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce' AND file:hashes.SHA512 = '00b05036757e558c3d210f838dce3c8b2b4808655263cc1d69bf21a78e93f6ad52b6a20a4d68ac033fdf06eecc334690190f38e8435dc64fab3d64b7fc1d5c96' AND file:hashes.SSDEEP = '3072:Y3Jlggn749TgxSGZxu7yb6BGCKKMA/2puQYdyf5z6QmtJVt7:Uys49kHIyb4KKMfpuQYGAnt7' AND file:name = 'cb8e536680732b474a5c26970ace2087667622caa3dd82c1c56731a7c5a1c8ce' AND file:size = '117168' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--48bba73b-ad9f-47d4-8c75-b4f0dfa77c22",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:53.000Z",
            "modified": "2021-06-19T07:15:53.000Z",
            "pattern": "[file:hashes.MD5 = 'aa043913e02f124a4e7171fa40dfc9a2' AND file:hashes.SHA1 = '73338b8931a3c265e8b544fa17de3056a3e56b59' AND file:hashes.SHA256 = 'bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7' AND file:hashes.SHA512 = '3a16091d8066245f2cd79df83af1a93aa2c8dc94d3c0a4e52fc52fd2c0fddc754cb4b30d868ebb0211803c71414b7a141a1595667a12d479a61fc2cbe33a1dac' AND file:hashes.SSDEEP = '1536:HL+3WXOQwi6wEBxmT33U/aNyq+4lRX6IHnsOVi7s:rOKOQwNOTH47q+4lAezi7' AND file:name = 'bff9b75ae2eea49a765f79d9c67c997edb6c67a2cc720c6187dd2f67980acab7' AND file:size = '115712' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--9c23f0ba-8a41-464a-9bab-60fe4ec0034d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:55.000Z",
            "modified": "2021-06-19T07:15:55.000Z",
            "pattern": "[file:hashes.MD5 = '530f12f8058199964d0b41f1856185ec' AND file:hashes.SHA1 = '8b04023990d18dcd5cc4c5538b332b017f3962fc' AND file:hashes.SHA256 = 'bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a' AND file:hashes.SHA512 = '790a9a6e77ac065b53cb719092076c9d4bffa03082dff79ea86949ed03a8eb13d23c44e41e2bccf98d49afb12f1a44914ff7be5fd0e43bb51f9340011b1e404d' AND file:hashes.SSDEEP = '768:01ZqCQKy8IYdfWiUelR36ihR6nmRYsn5jS/OPNi7SbpG:0Nyq+4lRX6IHnsOVi7so' AND file:name = 'bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a' AND file:size = '57216' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--7bbad130-f1f4-4b17-bb04-3d4d7d6bfc37",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:56.000Z",
            "modified": "2021-06-19T07:15:56.000Z",
            "pattern": "[file:hashes.MD5 = '31d3f0ae33c72beff48c9459b132d24d' AND file:hashes.SHA1 = 'f5bf9d483e0a204e7ff59fc092b4e580951802ca' AND file:hashes.SHA256 = 'b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86' AND file:hashes.SHA512 = 'e58997d351914a9cb8fa15672ae7ee195d131a9bc4ff991dc508869626c95e8514b75100ae12ebc4b08578e843863a18b248711862e183e50c5e81da29e42e07' AND file:hashes.SSDEEP = '192:C4teCocaG3GO/pTBg30i3BcPb+NC2bJUISPNglwPv2K4:CeNt/xO30i3BcjaTJmlglwP74' AND file:name = 'b16c3ed44cd04b033621ada7f9ab89d830949b3c9dc26999d862ddbeb7cc5a86' AND file:size = '11776' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--66cc5e31-e702-41bc-ad3d-c7d4e6f363df",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "pattern": "[file:hashes.MD5 = '8bf00ef4dd6bb308c76849901b03ccbd' AND file:hashes.SHA1 = '04e8a8d30869cf60ad42825667224d5cd01ade15' AND file:hashes.SHA256 = 'a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4' AND file:hashes.SHA512 = '551365e55dbe599a156d1de1e59e388878e13d3a491efe963fda241ec58c1c38aaf2d46775c4e1d3c46760d081561f9ab5be9468974e4693a9b3c60a4478b454' AND file:hashes.SSDEEP = '192:oCaQ3qaG3GO/pfg9m3CJ3Mc+YeZBkvmKI7H:o5Nt/Vg9m3CJ3qZ0jI7' AND file:name = 'a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4' AND file:size = '9728' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--17464b7e-b2f4-4c40-b4a7-acde8e505e20",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "pattern": "[file:hashes.MD5 = '491a38f52692a88f5e97a1107c06a9f5' AND file:hashes.SHA1 = '4a4609839b846f384f1b6f3a9a945bf3119d2f9c' AND file:hashes.SHA256 = 'a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e' AND file:hashes.SHA512 = 'a27dd60e06263a32955bdbdc1823c1d0185ae88d07f39098aac1506e78a22ea39d6aae6ddaad0fde31facb0e2140752904e68079f9dbe66a22b4fc0c9b7e3a88' AND file:hashes.SSDEEP = '384:LxNt/IW30i3yiwTJmlglwX74b14gHRN7aW0R1lnNfq:LxLIW3SxglNX749Ilfq' AND file:name = 'a3e8ea5e593176f9e66c17f6a200fa665c7ef409c97f49aadf5a55ad6b0be97e' AND file:size = '20864' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--8182373a-9d26-4be4-a029-209b05806b3e",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:59.000Z",
            "modified": "2021-06-19T07:15:59.000Z",
            "pattern": "[file:hashes.MD5 = '145e3c224e4ecaf26d4638efb9d622a7' AND file:hashes.SHA1 = '70d5b0be6ed51e43c0a19b773cead8793257bbc1' AND file:hashes.SHA256 = '9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89' AND file:hashes.SHA512 = 'f6a45167238bff44410c528fdeaf417cb6fd5a563bb61fb6febd76a26f427657f4f93175cac25a09784029818190645fb9d40f7ce781329a2eda7ae669f3d822' AND file:hashes.SSDEEP = '6144:+zhRwaGlf2ofbRuNPMxJZWWXR6UVUmxTOdbRnveIks9HRizWtlJVv:+zLE3TRuNP8cU0UVUCINWns9QW/JVv' AND file:name = '9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89' AND file:size = '577968' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--67c2f5e9-cb76-4e8a-b758-f5b944e1cebf",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "pattern": "[file:hashes.MD5 = '0e2d4679f68796e9dd0d663137cb9e12' AND file:hashes.SHA1 = '7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2' AND file:hashes.SHA256 = '8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870' AND file:hashes.SHA512 = 'd6d72172408f4eae8dc6d7453f3e1d6878a45eda1fede6417a188f776142b10fa3d3cf5727e66f6decae2dd25bbcc3f1d4fc337ccf039cafcb47b4b704285ca2' AND file:hashes.SSDEEP = '768:2WetQRPOQaniqkpY0O5w8dBxmT9y2/jSPyyihNfVABb/J:2WXOQwi6wEBxmT33U/J' AND file:name = '8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870' AND file:size = '50560' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--4c53521f-ba6a-4919-a7f5-1a486177bce3",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:02.000Z",
            "modified": "2021-06-19T07:16:02.000Z",
            "pattern": "[file:hashes.MD5 = '5bf9f601188a4b11a8baf9b2abbd18fa' AND file:hashes.SHA1 = '125ea078bc3cc79b34bec8141391acaf2d69ffe2' AND file:hashes.SHA256 = '6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437' AND file:hashes.SHA512 = '98a53163bf8fa255a82931829e2e79fcc8dd73a0b5adfeec0510a20d2b188c27ecf519131465489a4eb1df46aed6a6289e560c740d4705297b1a08a549cf0c53' AND file:hashes.SSDEEP = '12288:E3yoMayFrZ6j7CNWYE3EY3yWGnJmF92UO3Jr7v3t306zGo6ANT7oc://aUQ3EiEUF92UO3JrxnGuTUc' AND file:name = '6c856c3c315c0f213684045da3203692c07c3da5df755155fd8b128fb447c437' AND file:size = '612032' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--110ba31a-bcfb-4b6d-b365-3bea15e6bc6f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:03.000Z",
            "modified": "2021-06-19T07:16:03.000Z",
            "pattern": "[file:hashes.MD5 = '83720e64aa1388d55324a22536bd39cd' AND file:hashes.SHA1 = '8fa3636a7697f953d7daa02a313981b9e3bc98e4' AND file:hashes.SHA256 = '659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9' AND file:hashes.SHA512 = '0ab402911cdefceb9a6ade0b968b10c628fed6da17097b8cd943f76527078a597425c8d0845bb86f0318ee1967dd3f43aa951f822b79933da475eb1ace70922d' AND file:hashes.SSDEEP = '192:V06wXINaG3GO/p/gqEQ3UCp3syXOYWmvmKI7H:VnNt/1gG3Hp3ToUjI7' AND file:name = '659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9' AND file:size = '9728' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--28b4a43e-ed8b-435a-9e3b-d7fb6b69ebd7",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:04.000Z",
            "modified": "2021-06-19T07:16:04.000Z",
            "pattern": "[file:hashes.MD5 = '0bd3b9f55a2d3a13f506d9d8b970e0de' AND file:hashes.SHA1 = 'f023177aca17f6dc90fdd9588240cb16c70a9fe2' AND file:hashes.SHA256 = '63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0' AND file:hashes.SHA512 = '3cc2d527725a7c5d5add412b6145a141a3368388d9957864b308886ba6ad376b552ebea6272e4291581eccd0a6bc71bedd9813c28983ddb2f3a31e06e607a8e5' AND file:hashes.SSDEEP = '768:o1ZqCQKy8IYdfWiUelR36ihR6nmRYsOSHjS/OPNi7HbB:oNyq+4lRX6IHOSyOVi77' AND file:name = '63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0' AND file:size = '57248' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--7d7df2f7-091a-44b2-a91b-4ea03d806a22",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:05.000Z",
            "modified": "2021-06-19T07:16:05.000Z",
            "pattern": "[file:hashes.MD5 = 'fd969b03b439284ff7a31c39cd336f25' AND file:hashes.SHA1 = '6a8c00b703a5d6b8c82878628978db9bf282d6ae' AND file:hashes.SHA256 = '4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863' AND file:hashes.SHA512 = '3bd433a6488c0284c3a1ab22a8ddfd60f433488e216d6323c9658fd4aff61c5abcc6b728fb13fe218436f60acb2b311cad7cf029abff5f589c143c9193643f90' AND file:hashes.SSDEEP = '96:wlnXD23Cm0IShlUrCWHVwsMMej2TQu20p05ZPUcNVG7lEqhZRi2wot6xMvazls:wlj3IOUBVIuQue567lvhZTHtdcls' AND file:name = '4a229ab274e364df92cc46ecbc9faab32f7b0955dab982658313f2faf9410863' AND file:size = '6144' AND (file:content_ref.payload_bin = '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
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--a770c83e-0eb5-4442-aa3a-19a38f0f94ad",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:06.000Z",
            "modified": "2021-06-19T07:16:06.000Z",
            "pattern": "[file:hashes.MD5 = '8a66ccf9261a0cc08a6ad085d6dd4055' AND file:hashes.SHA1 = '8b860c5d34254290769d40d703625f774c213e00' AND file:hashes.SHA256 = '04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd' AND file:hashes.SHA512 = '079f55f2633f86640351a658067cb8b08b308a1997a2e6698d18d61b16b715ac55f721ea0bd8dce61ac0ebc4513eb32b0a989aab258abcb818897b6c0e78c464' AND file:hashes.SSDEEP = '192:9KteJ3caG3GO/pfQmHO3Ti3pHeUzDB+vWK4:9vcNt/RQWO3Ti3p+UzDQr4' AND file:name = '04e88b7717aadc6b56dfa006b9414fc2c899c398d7e003627770e07fed52edfd' AND file:size = '8704' AND (file:content_ref.payload_bin = 'UEsDBBQACQAIAAM601J1Nsa0dg4AAAAiAAAgABwAOGE2NmNjZjkyNjFhMGNjMDhhNmFkMDg1ZDZkZDQwNTVVVAkAA7aZzWC2mc1gdXgLAAEEIQAAAAQhAAAA+1nYmKMC/XoEJQvEbKRwp31y5byv+In3FIG+WduswJkd+nmLKcilvzcIsmJpH4B5gg4B0cV5kp6KRn4R+ERAp5XIhPKtGP+8tRLOGJUg6q3Td+OB78SFPFjhXFRvN1hW2qHG0eLidLZdcGXcKRDuSahZ/TVwX0HJSKvtQiSEUTuoZ3nrv2fT/rCPajJsPymR4aVfbp/hLqIGcIH3stKZr/G64BMAHLxHedhQYNlPM5zJuY/adAaWVGhK7a0VbVDvIaWSQETyNIlYIqzt8fCVrUscnrqyHtT8UboaG7HRSy+zVgzsFb5M65mZ/lBqU2ROPxAffjQ/ThAlplG8Qy+J2EQB3BgRAb4PljAdxYO1NySltLXPtcxKZaq0joaDE65mq3rppMx6MmgeYyjidWxPr+apeXiNSs7Ie6dbeaxnHLi7BMUSDMpggP1sqqAQsLgrtqzRGmGRfY8c4e8TqKWo+HmCeOlbKXrhMfuiEDlDnHFEtGCT15lzRbDg3p4mcekWGsb3Hb5RbeH/viEMGURM+saFw6KDQJj0UHKkBVwnBkNz74WpilZB5c5d6B+R5voIKvdHAIc4unFabgw5DoOwvv7mtSOoEMyT7WsbxBhXgWfNuIPr6rFiJck0KDzprbPg9qHCT5Cotm5cVrwcPMZHz2KSGb+QLHg55WeO/VZCyg0I+NV/KwNjT42tgvWheU08pQE41ImOaZRSZI96m40Ujymg5veudahJi9M/C7Jq3+nXwscOQUcktSkm6X/yBFAjmlYxKNFzc0r8HByH6g6dMestzbhkSzgYAPQrAWlg1QKK7Vkyn9JKVQkeEvUyXwy00WOaiBBmkDeTFkRP9XQZQmiiFwTR5NZqZRk81wMdXQ7k4zBABRysLRCwXm9ddnoYFbievXejVCfSo1PGfiFLEWWrNN1nQaHRWI9QYgQ8PLWwIo5RQy61rLIDsJYo7of+HCvrBttsvpLLL2v2OtT5uPC0kYk7xDkfU5anbrZw7vhAMhnzOxwRLLEj8/0p52mhQEWi3+LcRN3kX0dXSpIzHjHJzdc3WdMkqsfbCaWOV4o3yJKDi4q9ADajxci/53H+fbqQr0uKcOSNdluYVFglDA+mi5MmfzmHeLOOV9K0gNA74+uL0RnASDh+cMTRA18jpth/XbfNFjQCcwJyL21PCs14rKXafvm2BfYylF5LSf97RD31Jm/HKbajs+sHORvHhz1NWCYgD/F2eK0PmlpUFKvLO4HJmU5GxSTnDUVM5cNUeUHcz28aVflZ9cr1jNCbmgzwBEqQXt9yTCpImAH9w+UbOP7wmv5I35QMhn5rW6Aki5rM+oPYsr/mwSemmytVS07M5iY3skthUumNG8ZVoDbpaurRzx7lX8vFuGbpUaLLa3HGwW75/2oj9SRfeZimXbvBmYqBJqJCI7V1I+sDFgSbTpNNVEUgewAoquXWbJxoj2KFton/c5Vny8+ys9aMGuQpzu+iz/26omtBOKqKWPKt1VYzPAgjEB8ns0wU4db6ei7atIM7IdC/56lXHdqmD5pdKMRagztCe+HZ4FzY7W/S2i37XhEs7GjX1W7X55nchhinE2xoE0NJmIX0yy1G8eOLbTUUwBMiIfH77EsJex1N9sOdn6kZ3AY8M3uFAl+vX25JDGTQa8cka3qNi+nAOALEi4Bal7bW4n6k6KV7uhvePgXsMI3Bp1OPd9mx394PBa/3lIUvo5eQqJt+WW4Avv9Ncax+3SOMMpVV4aLbM86cpDMT1NPP43377gpXa/iGVA8JugiiGYQ6Lup1SJRnorBtQKhdwttq/Pj+PJJ4RhSqgG12Ok60jGgFiineWBgj0hcTD+GGbnIye6msBsYcy+JJrp8UrEw6AEYN2CHhFMsfyIGcEsaobtnBPD6vuRJKQwUtf0n0T6YL5V3tGdx77TBLcOsBaBeESfWPktvihCt5wwiimb4aQu1m4i3N3iZXFRlLaTlQz+fE5MomCEiH1kVRH74ehVML9PGd/bjiTbLPvno223BC39G+Aks7giPBWsvf0EyAlUPVLv9n6Gwws59qlISf27PpKhZSG2qOgg3kwSuZUxTrClVkMwUG3D254/kuI9FAMfaAjWLRnf8cO3M9oihi4MojBfWIM/kJZFWM98PH1/PQww5+OyeUVpvIZvTZMcgDHraV1aPPfACfHvDmnzbWAz6hvidXptXefzgfiPe4smx6F1IT4f7GW8q71NENo2v73uU+2FtWJJk6TczWRUR8aR2VQYQT1r5HKopd5Qp+H01cv95Yztt4hl/ML3iHtzcBY7gouR75L0q12YAGLsanxaLaGLEaUYFcrbOSSg2ELek7x5/AOJ+cbuCF5gB0etRLoMSkvJLTuYMhCFpMX60m9CuvUZMBCLLChPKVvdpAi5aeFo/5fADq+gia4PO/UB71EwOVVDdNw2xJ5bNoaTGKizFUTLJsGesmyRBvmVg6qHN9GPVjmzFuPJ478svfSbV4KgASkJozwbcY2CotQqEqo8IqEOtTSwLfowVW8x6T1d7OeRO/24kFIrEXMX3N/0W6rTGT96bQvp5c5Y7xVIy7ssuLQbLL9vyDjBb5Nfjjdeib3Mz2FSbOvhKVzwqxQgDJa719iyRlYWxHZxd9nF3Kyx95w6OqsA0XAaeiC6WDFCVhnzIRdEGBOcqmSh6vx1RJgYZT6Dh/vkkF0IewJwUhnPYKEUuan4WnGj9EYStUzXiYEr82yU0HJnVpFI0XBc/RKFG4lItlwW2WyDsDogJRNfl/ycbEEuUc7+hwxQXxNn9ofmHxCWc6a5k1DPq16U8eTdbXErH0okVARoLCLPRVimcR26tSXy/2G2JtXMV0ZRHgzlPYvxdE5BbS20UO8q/x+J3422mCgAGxDGuVdxYRfC05Mjr6AQHMKYs1P6mRPMUUrioAucneKTx69KTtSyXx4Wa1UAYcKvMQQlC73S6pyWK4gP9gYZz535kfGyISWiL2rc/OYnjKlqGSx2v7WJu2F5E6fihWv/CzVNb1CUcRjoe0V6NC19qXotkS5h6EMFS+Z7SIiFgM515WwCIHNIYeSFCCYZsBnGmb4RfGFYXYG6uJeDsOq8aA9IfGrqCyQRU0F53Ibg4i2JhRs0+J28Rp5OOGUixnaen0hnm1rbhapfYX+zuQEjt0h6FcbVT1550RRyQvES53O/A4+zfLCz/lJrqsgQ2m2FxmrZgDTNhnBUJ/MEknwdmop38M64Sr3u+74zzZJwjk510A9e9YhpKC7nagpE0bT28hOZP/g175ewD4Q51cpvs3lfEU7RPZOGax/YilNWH4/SvEgjNc/ZArQSYXFa2OB0RNSc4lCiXbr/H+0IOILQdkVU
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:16:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "file"
                }
            ],
            "labels": [
                "misp:name=\"file\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--468c9831-66c2-465b-8e97-aa2cfae5ca25",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:21:56.000Z",
            "modified": "2021-06-19T07:21:56.000Z",
            "pattern": "[url:value = 'http://110.42.4.180:2081/u' AND url:x_misp_host = '110.42.4.180' AND url:x_misp_port = '2081' AND url:x_misp_scheme = 'http']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2021-06-19T07:21:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "network"
                }
            ],
            "labels": [
                "misp:name=\"url\"",
                "misp:meta-category=\"network\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--cb2ad8d2-4513-4824-98af-2417ede9f9be",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:47.000Z",
            "modified": "2021-06-19T07:15:47.000Z",
            "first_observed": "2021-06-19T07:15:47Z",
            "last_observed": "2021-06-19T07:15:47Z",
            "number_observed": 1,
            "object_refs": [
                "file--538fd0cb-d095-5a45-b311-c04ce8e7791d"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--538fd0cb-d095-5a45-b311-c04ce8e7791d",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "driver",
                    "number_of_sections": 6,
                    "optional_header": {
                        "address_of_entry_point": 5368713632
                    },
                    "x_misp_compilation_timestamp": "2021-04-18T14:09:04+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--c234d4d9-40e1-48a7-ba2c-0b5f007a4663",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:49.000Z",
            "modified": "2021-06-19T07:15:49.000Z",
            "first_observed": "2021-06-19T07:15:49Z",
            "last_observed": "2021-06-19T07:15:49Z",
            "number_observed": 1,
            "object_refs": [
                "file--faa06b9c-cf5c-5f94-b066-1c11d658258d"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--faa06b9c-cf5c-5f94-b066-1c11d658258d",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "driver",
                    "number_of_sections": 5,
                    "optional_header": {
                        "address_of_entry_point": 4198720
                    },
                    "x_misp_compilation_timestamp": "2021-05-15T12:44:55+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--f41bb4be-9919-43b6-9196-0840d368ee1a",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:50.000Z",
            "modified": "2021-06-19T07:15:50.000Z",
            "first_observed": "2021-06-19T07:15:50Z",
            "last_observed": "2021-06-19T07:15:50Z",
            "number_observed": 1,
            "object_refs": [
                "file--bd5e4742-0223-5297-adc9-5a0d18aa448f"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd5e4742-0223-5297-adc9-5a0d18aa448f",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4203264
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--64bed6a7-3297-4789-ac29-49c73b493235",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:51.000Z",
            "modified": "2021-06-19T07:15:51.000Z",
            "first_observed": "2021-06-19T07:15:51Z",
            "last_observed": "2021-06-19T07:15:51Z",
            "number_observed": 1,
            "object_refs": [
                "file--127e79c1-76d1-5672-9412-d0edd90b1d99"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--127e79c1-76d1-5672-9412-d0edd90b1d99",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204160
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--73fe839d-d8b3-4b19-8df5-e075319f39cf",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:52.000Z",
            "modified": "2021-06-19T07:15:52.000Z",
            "first_observed": "2021-06-19T07:15:52Z",
            "last_observed": "2021-06-19T07:15:52Z",
            "number_observed": 1,
            "object_refs": [
                "file--fd2177a1-9176-5869-b199-9f8baca59774"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fd2177a1-9176-5869-b199-9f8baca59774",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 4,
                    "optional_header": {
                        "address_of_entry_point": 4201754
                    },
                    "x_misp_compilation_timestamp": "2021-03-21T09:46:34+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--14cbcece-f046-4ffc-9558-8a1bbc704211",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:53.000Z",
            "modified": "2021-06-19T07:15:53.000Z",
            "first_observed": "2021-06-19T07:15:53Z",
            "last_observed": "2021-06-19T07:15:53Z",
            "number_observed": 1,
            "object_refs": [
                "file--bd5e4742-0223-5297-adc9-5a0d18aa448f"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd5e4742-0223-5297-adc9-5a0d18aa448f",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4203264
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--2c0b5972-cd00-4f8a-9e8a-cb31b9914593",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:55.000Z",
            "modified": "2021-06-19T07:15:55.000Z",
            "first_observed": "2021-06-19T07:15:55Z",
            "last_observed": "2021-06-19T07:15:55Z",
            "number_observed": 1,
            "object_refs": [
                "file--5078cef2-64fb-5b7c-9194-3566536e6c00"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5078cef2-64fb-5b7c-9194-3566536e6c00",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "driver",
                    "number_of_sections": 6,
                    "optional_header": {
                        "address_of_entry_point": 5368713632
                    },
                    "x_misp_compilation_timestamp": "2021-05-15T12:46:38+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--8d7a063c-54d3-492a-ad81-5352128577a7",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:56.000Z",
            "modified": "2021-06-19T07:15:56.000Z",
            "first_observed": "2021-06-19T07:15:56Z",
            "last_observed": "2021-06-19T07:15:56Z",
            "number_observed": 1,
            "object_refs": [
                "file--016b55ea-6462-51ba-b868-932818db01f4"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--016b55ea-6462-51ba-b868-932818db01f4",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204128
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--83630b45-1bf6-46fc-b17d-3a4c69127899",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "first_observed": "2021-06-19T07:15:57Z",
            "last_observed": "2021-06-19T07:15:57Z",
            "number_observed": 1,
            "object_refs": [
                "file--2ba7efeb-43ba-58ec-b9fe-76bf8c92b957"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2ba7efeb-43ba-58ec-b9fe-76bf8c92b957",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204800
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--2a138470-fe21-460e-835d-0fc839b2a9a3",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "first_observed": "2021-06-19T07:15:57Z",
            "last_observed": "2021-06-19T07:15:57Z",
            "number_observed": 1,
            "object_refs": [
                "file--127e79c1-76d1-5672-9412-d0edd90b1d99"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--127e79c1-76d1-5672-9412-d0edd90b1d99",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204160
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--adca75b8-b784-410d-abd9-4b589bccf3df",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:59.000Z",
            "modified": "2021-06-19T07:15:59.000Z",
            "first_observed": "2021-06-19T07:15:59Z",
            "last_observed": "2021-06-19T07:15:59Z",
            "number_observed": 1,
            "object_refs": [
                "file--3366f255-2a49-5470-b397-6e35dc413a51"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3366f255-2a49-5470-b397-6e35dc413a51",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 6,
                    "optional_header": {
                        "address_of_entry_point": 4670116
                    },
                    "x_misp_compilation_timestamp": "2021-03-29T10:01:18+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--3d608d86-3642-4eaf-93b5-f9a2e464d0e3",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "first_observed": "2021-06-19T07:16:00Z",
            "last_observed": "2021-06-19T07:16:00Z",
            "number_observed": 1,
            "object_refs": [
                "file--bd301ee5-60e6-556b-94ca-84510d7bc8ba"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bd301ee5-60e6-556b-94ca-84510d7bc8ba",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "driver",
                    "number_of_sections": 5,
                    "optional_header": {
                        "address_of_entry_point": 4198720
                    },
                    "x_misp_compilation_timestamp": "2021-05-15T12:46:21+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--a9ef8fca-738e-436c-8664-130419d87650",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:02.000Z",
            "modified": "2021-06-19T07:16:02.000Z",
            "first_observed": "2021-06-19T07:16:02Z",
            "last_observed": "2021-06-19T07:16:02Z",
            "number_observed": 1,
            "object_refs": [
                "file--b65af11e-0995-5704-9392-cb52403d5c2a"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b65af11e-0995-5704-9392-cb52403d5c2a",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 4,
                    "optional_header": {
                        "address_of_entry_point": 4211558
                    },
                    "x_misp_compilation_timestamp": "2021-04-06T06:00:16+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--4badc42f-32ae-464d-bb86-d335c70e8821",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:03.000Z",
            "modified": "2021-06-19T07:16:03.000Z",
            "first_observed": "2021-06-19T07:16:03Z",
            "last_observed": "2021-06-19T07:16:03Z",
            "number_observed": 1,
            "object_refs": [
                "file--ed52a7d9-24c3-502d-b4c6-7d2e1c286a03"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed52a7d9-24c3-502d-b4c6-7d2e1c286a03",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204768
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--03846d30-1141-4004-9f4c-cce033977a00",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:04.000Z",
            "modified": "2021-06-19T07:16:04.000Z",
            "first_observed": "2021-06-19T07:16:04Z",
            "last_observed": "2021-06-19T07:16:04Z",
            "number_observed": 1,
            "object_refs": [
                "file--03698891-97a7-569b-a302-85a2ec308d63"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--03698891-97a7-569b-a302-85a2ec308d63",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "driver",
                    "number_of_sections": 6,
                    "optional_header": {
                        "address_of_entry_point": 5368713632
                    },
                    "x_misp_compilation_timestamp": "2021-05-15T12:17:21+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--fb4648ae-f09b-444c-b713-50e55353621d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:05.000Z",
            "modified": "2021-06-19T07:16:05.000Z",
            "first_observed": "2021-06-19T07:16:05Z",
            "last_observed": "2021-06-19T07:16:05Z",
            "number_observed": 1,
            "object_refs": [
                "file--83b1eee8-a95a-5ae1-bfff-9b6adeb014cd"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--83b1eee8-a95a-5ae1-bfff-9b6adeb014cd",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 3,
                    "optional_header": {
                        "address_of_entry_point": 4215296
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--eeb9a762-1710-454d-8d57-178ab5e76839",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:06.000Z",
            "modified": "2021-06-19T07:16:06.000Z",
            "first_observed": "2021-06-19T07:16:06Z",
            "last_observed": "2021-06-19T07:16:06Z",
            "number_observed": 1,
            "object_refs": [
                "file--3f6d7cb4-fe61-5056-af6f-ded4af854c8e"
            ],
            "labels": [
                "misp:name=\"pe\"",
                "misp:meta-category=\"file\"",
                "misp:to_ids=\"False\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f6d7cb4-fe61-5056-af6f-ded4af854c8e",
            "name": "",
            "extensions": {
                "windows-pebinary-ext": {
                    "pe_type": "exe",
                    "number_of_sections": 2,
                    "optional_header": {
                        "address_of_entry_point": 4204192
                    },
                    "x_misp_compilation_timestamp": "1970-01-01T00:00:00+00:00"
                }
            }
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--6321c3b7-2f5c-42bc-9678-3404093fcc86",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "9c471cab-8e3b-4745-8e48-43848b2fb184"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "26624",
                    "category": "Other",
                    "uuid": "aa69cc41-a982-48bc-b61b-8d9ded7c7c02"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.3151171440822",
                    "category": "Other",
                    "uuid": "754c42c7-3b86-470f-9936-7a1c0b24f1e7"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cf0b16eca2aedff96b586a2add8e956e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "56d1dcc8-2819-491b-9d88-8846205d9974"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6b3099c00646a54d25d96c0d9a3394463394083d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "491e9404-fe3c-412e-8345-ea061688895e"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e64daa8926bfab138ddbe16a1f84ff4dd67984b06d0d908fecab21f051e7786a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a064ce37-572f-4d16-a327-ef82329a4c0b"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "f408833fd42da728bd7f89f4e288a4fbe1651cff3a26fa911cd09f845302d678c70037ceb36b3d58dba910d1b93ec602fa0f9ac13ae63936c4332d4c0f89c049",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "da2254e3-6ebe-4d94-89f5-7ed77ddb3791"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:T7ptyfdBgZqCq6pWKksgl2IYdSuC2WigRelS1K8C1x2i7JxhsmuH40m+wMe3ifsY:T1ZqCQKy8IYdfWiUelR36ihR6nmRYsY",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9ec1d8f5-124d-4dbe-86dd-9adc2d1bddcd"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--e382fa8a-ec6b-42f2-9aa9-d0c67d3ce31c",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "ec7f52ea-bf9e-457f-b879-c0b86ee0be7b"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "4096",
                    "category": "Other",
                    "uuid": "0aa501d8-8cbd-4a59-8099-c31f26abdd57"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.5975419614638",
                    "category": "Other",
                    "uuid": "fbb1dbb8-a1f0-4278-af9b-7100be6e8fb2"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "9bdac8b097939eaed66915ff2b749a65",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "fd5884c7-f7eb-460e-8824-a708a429dab9"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "90ffe7d75e330312af75613f6060ada878fd40bb",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3dadda97-cb77-42a2-9633-b4848478c7fa"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "6e9301ad9fc55c0985604ca76ea25bfbe34d5ea053a5693b63988b5771384403",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4705a957-e834-4d4c-b375-68fc51d0cda7"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "e42210e5468e15207c537b77c87ff62a9519dcdff25b6ae370f738d35d73499af26a7608996b3f4fdb50c8e46aff7c016b353b195be156a3c8c320d545eb9cf3",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ff96257f-dfcd-4435-bf84-8157143c4975"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:rwcdILFDTZ8qNEFw6QNO8gpXqsBAXpQXQcPhhpHP52VosLHMEiLnRVsxO3YU4dTx:r4Cxefl0ZR2SsaROOrOBEM",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1ab9c7dd-958e-43a9-acdf-5b7a5f05f0dd"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--a5122353-0bad-4b08-9755-48619da51f61",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "7ccba7df-ae57-4817-b6a7-ba1c3e3178ba"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "10752",
                    "category": "Other",
                    "uuid": "da19b595-5098-4084-8194-0dfeb85cbd9f"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "0.6671192572015",
                    "category": "Other",
                    "uuid": "802dc942-2c3b-49cf-9b60-4b408cdc4499"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cdfba2ba88c72647f5347a2835bfd043",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1425fd44-e4c1-4071-b9cd-db736caff24d"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "da6a4ffcc7026a22fc6df5b886285f194680b0ad",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b72508ca-66a6-4229-8407-5189a71d6c68"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "b5ca2985dcaf1bffd87922bf5ae6425012d9ebea70b1f9ec5ea7bc212c37cb25",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b35afd78-4cd4-469d-8b5a-8551a6b7dbdc"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "6ccf8b884e64df2a4074d994d97f287f43a263614ebd91597dbe5de0a5f3c48b288260fcbf3e382b4860747a6da9d03e5f7c8e483d81f1e236dd59ba833bd31e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "319ea4ac-d0bb-43a4-861b-89bca08d4ddd"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:W5xK9PJtoa+0SC8gTMCkzVk1yu6wnffu6wnfX6/1nS:aK9PJto8SbgQW196w+6wP6/9S",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e93a3ddb-0d4a-4138-a3ba-7ca89f3d602d"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d20843ec-7a04-401b-909e-c26ebca453c2",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".pdata",
                    "category": "Other",
                    "uuid": "07718463-fd8a-4303-8c8b-4c02cd1be926"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "eed1fe18-d608-4f94-b93a-e92f8f837605"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.4275237153285",
                    "category": "Other",
                    "uuid": "840a7eb8-8c95-4dc0-88bc-ff777f7340dd"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "28b9ff623b02f7596cf4564576009938",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "87c0f98c-c2ff-4ffa-8efb-7d6b424619a6"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "2d5145a5694e6dabce74ffbd02879ca657dbdc2c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b9d2e2a3-4f9b-4e7f-be7b-f8dd56d37ad9"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "f5a8d079615b1a06d900cbd6d3ec9fb4988d1c007634fcdc2bd42cd675b51fff",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "32c334dd-bf7b-48e9-b0fb-89412319ae21"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a6d5a9d3f622d502ec30e85491a76589968b5f8a1c62f52257fe334d1643c7048bbdaef21a5c5888736f851bc39b7d3dfa13ce49a171fb7feeb4ae872c0a9398",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "36da0f6d-be6e-4b17-a982-6f81cd7acdd0"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:rworPlT2b8OvhB5+hc6TRNot/PiTmO+SMxsyBp/AFxXqLAQADSh5b:3sYgDwDT2HSfJYsSp/APwAQAurb",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1c45af3e-2cba-4b47-bbf2-2ff49d579c5c"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--c3389c56-14a2-49ff-a14e-a9cf391c07ef",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "INIT",
                    "category": "Other",
                    "uuid": "0f686d51-677f-4acd-a8ec-f3cdd9c92c37"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3584",
                    "category": "Other",
                    "uuid": "f6d40ce1-8622-4b67-b3b9-47957e685ae3"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.1718697425243",
                    "category": "Other",
                    "uuid": "01e0a230-2a1f-48b3-b241-4832ac0dad50"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "bf3aaff8a4f25625c50651a235f234ea",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5c306537-3e30-40db-9b25-4d167e029dd9"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "efa19aba8be359ef3d1671eea2533d40a8ad3574",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9699addc-c80e-4066-b431-c5a8053a0784"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "0df32b5ab983d4f13d1f4d350e1a92f66e41350711886943720894025588ea7a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e0674277-451f-4346-a447-ce41208d691c"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "b3d5d87dfff44bc6cbf37f4f514c223bff7229ac93342c2754effb6d6b5a91fd01939160e5ef37c5edb66ae94670b7ef9387004102d1aa6aa128a32bd7f31bee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "52b58145-d6c2-4597-b907-81d5e4d1a827"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:qjHwcdILFDTZ8qNeDYDOjNe7kBtWt2BpRbD+KCm7MuINTg3nuO4EgdW/lLWfe:qjH4ChDY6A2BXbD1XN2EgdW/lLW2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "769c8e2e-71ab-48cd-99e9-2d6fa6007240"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--67ee881e-d39f-42fb-a99d-5c55ca19a6bf",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:46.000Z",
            "modified": "2021-06-19T07:15:46.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "5e06ebe5-8c0f-47d5-856f-8536019f6582"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "0864a3ef-08c4-4806-84a4-822fabc7368b"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "3.6204816846131",
                    "category": "Other",
                    "uuid": "32f759f8-2ede-4ca5-9973-9360bf68189f"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "fcb8a85ae2d11c0aefad6b5535e1bc90",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ae036816-45bc-4115-bc99-a31dc9657662"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "12c935664a10eea034a86053d7dad2c872d582e7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "084590e3-bb13-4758-9644-e4bdbdc9c004"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "199727264dad79db742e501ee665c0adb8a5e08f70158dd23a8780663e330e0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "252bf901-28f4-4f50-8623-e0224a00aca8"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "aa6cd28eb6eb70ef70229126734a359aed53a505608162ee9462c5bbdc9790e4c35336c52f39941988c3f7c9ee8b4c1d53c9e44b241bf2dd75cb827a61777419",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ef13ab02-6fea-4727-ba93-3c9ceaff1abe"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:X96q9llvt1CtC4/:0+6tC4/",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "81593feb-0503-4169-ad55-9bc396077d3e"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--47b82d50-d85e-48c2-a3c9-3d34d0f9dcdb",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:47.000Z",
            "modified": "2021-06-19T07:15:47.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "a8546e63-2f2f-4e2f-9c7c-48dcd6b73858"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "24064",
                    "category": "Other",
                    "uuid": "8569f4cc-d72a-4ddb-a117-3a173d12e3e2"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.3405794123405",
                    "category": "Other",
                    "uuid": "6168ab45-a42c-432c-9feb-e9f8ac6c2187"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "776e79f0764eff801aae771252c3fa02",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5e74dbb5-0a84-4516-a4f0-5a8b7a8e5d8c"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "4024c296618817b9b35df8e78a2e610e3a7e2251",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "30ed1beb-43c9-46dc-a00e-cb7daa88f6b2"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "b3a1f978c3c288ba58f7540ab0d596d698eb1a450a57abda3c1cc07e19114407",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7ec61737-8d55-4c60-abe1-c58ea3600a70"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a56dcd5211f03861d13d14f04142c262750d3717bf589277ab47e1d496dac3d2cbcb6a6627486a33bde3202ab1d42ede030d736f597a7314ec2d3db82dd79ca0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "48c997d3-88ab-4df6-b103-9a4d2f72e075"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:h21YxntngRRPOQaniVXgMmZku8YcTTO58N1ZQdY2x4qyg+3h:hWetQRPOQaniqkpY0O5w8dBxmTR",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e4e558a4-3f5a-42df-a409-01e19fc1ba46"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--5bcc2973-c2ab-4e94-9fa6-c7e7ec195fae",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:48.000Z",
            "modified": "2021-06-19T07:15:48.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "ae55d480-1907-42ab-8d3f-ae437ff7ebf7"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "1536",
                    "category": "Other",
                    "uuid": "32060bcb-fa68-4cbd-8053-e0986daf1934"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.565535020822",
                    "category": "Other",
                    "uuid": "dd6aa8d8-7098-451c-a7de-3afc7813bf1a"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "e0c219ca37595280d7640998b6b9c704",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "06ae2b8b-0bc1-45ec-9eac-72ae4f556f03"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "e2241b5839b9b49217a5920b0abe3b26df755847",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d76693f1-4fba-45cb-b580-98abd609d03c"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "d0342377ac505f37a21fba24e68195ec67e0cabaa5aba3ca18f6c8ac81337881",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "2480a737-6a00-4cfb-a2ef-e63288161503"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "20d989aa10d27dc41464801f34a5ca1f2752b46547c625461aa9cddd5fe8ee9f7d58a7dd5fe8775e4c6a83d61a8ae84f5de119bf570bf89657485f1499766cb8",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9c954469-e387-4e76-8a67-e86d44ac24ea"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:VuYWgpPdowf+p7n3JAlYHj4OoSSWMU1w6QO/OW5elrBSdNcSaFDVNyfwfQyxiEiG:sYbp5+52lWSWB1w6Q4OW5e5BeKSaZqs1",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3b8cbbc0-afad-4a4f-835f-55ebfcc9153b"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--69b9552b-6d64-4b76-a0a9-dc0f90cd6bb8",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:48.000Z",
            "modified": "2021-06-19T07:15:48.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "2be9d9cf-053e-49ed-89d0-d22cf4a604b7"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "10240",
                    "category": "Other",
                    "uuid": "6c30d4c9-cba6-4ed4-ad04-44c33a56a5cb"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "0.6890836305716",
                    "category": "Other",
                    "uuid": "11545395-be0f-46d4-b7c3-d01d2637edc0"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "d962b31f202d0ed76ca43a73874ee4ab",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "cca3cfa0-5b03-4c6f-8aea-029044da8fe0"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "d3427e3bed6686f6592787ebe95d209fedc871a4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1a7bca30-1dd8-4e13-b262-78cc80e9eb7b"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "cd81fe7de212dc7357a8b316e2d9abf50274683592d4e97b84307f4e510785eb",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e877e128-9096-4066-b496-28a005e362fc"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "938cae1a8b0463e806bfa5d0ae4db760b6a89251c1ed4aac5a67c7bf32402806ce56351c44df8242bfe66a76e43ede0bb918c5e82f60cf10178891e4744ec29f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "fb2f8a1d-4539-4441-8e10-e7430abe527d"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:25fI5K9PJtoa+0SC8gTMC0zVk1yu6wnffu6wnfX6/1nSBtN:smK9PJto8SbgQm196w+6wP6/9SPN",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b4d590f5-53d7-4433-b61d-cf8f21eb7365"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--2332dcdc-e184-4d02-8df1-e00055e7c435",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:48.000Z",
            "modified": "2021-06-19T07:15:48.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "INIT",
                    "category": "Other",
                    "uuid": "cc2c195d-988f-4e9b-8e58-cff5fb2b7539"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3072",
                    "category": "Other",
                    "uuid": "b1f4311a-1f0b-4ae3-88f9-da504b9a5deb"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.6744050867927",
                    "category": "Other",
                    "uuid": "78242e9e-9536-42af-baee-882eeb57f75d"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5900abb4cd3dcf41ca91b58504b690d6",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "99bac18d-503d-4de2-8bf0-3ff4dd51608b"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6c02d86e3aa6caf28bf4c17e5e9ddb0113999b78",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7ba8222a-1d44-49db-9e07-c4f70b4411cd"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "4a819123fe7f7360495dec76b6fcb73b105bb87c5255df7650b15421b95f45e4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a371825b-e049-4b33-83e6-c5e91aea63df"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "55fcc8138926964081972710e6ad7756dd42639dc25c65e166533c980720cdf489aa62bf6598e3ad871d12c6d5c7e0890c220cf12bb0fec6d010d755b4790679",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c9ad0f6f-950c-47d1-ad0b-4fd9044c6de3"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:OM2DYbp5+52l1DYDOjNeYrOENPMgFBBTd98bCMQem7zPaTgcV5iHrXAm/lLWfU:Z28p5+52l1DY6h5PbBBv8bCjTvTAm/lf",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "750caebf-06da-4d1f-8e72-ef5e554be61e"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--fa1b96f7-95f4-41a7-8282-d51ea35a003a",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:48.000Z",
            "modified": "2021-06-19T07:15:48.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "0d11583f-3325-41b9-b476-40e2551c236b"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "bb4242d9-8536-49b5-a1df-5383658c7bcd"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.678416291454",
                    "category": "Other",
                    "uuid": "3a86afd6-e682-41c7-a4e0-1966d1298ffa"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5697b274e4aaa5fdec318fcc871f591c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "143b0031-5ebe-447b-9e3d-07f76894ef42"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "385859eef08a7554e5988d1c0a71b493c40bfc54",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "85fef2c6-b10e-43a6-ba18-7a58bdbae6a2"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "a35fedda00d2ae53ae9fffaf7307f6307f7c9c91c4bcf51c6973b5391da8c211",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d2f78f4e-fe76-46c8-83c1-830a201868b4"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a6594eccefe7cbd618ad9f03662c0cd3ee9fae5460ead576da8b902c6428f8a753132614c816efafc6b4b18805a41d2741760843e160fefae7029d2222eb4a7c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c25224b0-50ef-4c86-b9e2-efd8651e4c81"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:yjg+3sYgvUduAGpW2VBpYXhzRMClFvlXfFwXyWi11g2q5GjtBe2BLfJyUNmZWdeF:hn8kGXZvFF1ZqkjV5JYTAw",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f745c225-67c5-4963-bb13-70f8b68b7fef"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d40bd6a2-0eb5-4796-b699-dffc2be4b431",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:49.000Z",
            "modified": "2021-06-19T07:15:49.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "e8e9a949-fb7d-43c8-b254-6fd99e5e50b3"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5632",
                    "category": "Other",
                    "uuid": "c8c7c6a0-28fa-41ff-9055-256f7966233a"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.058013904165",
                    "category": "Other",
                    "uuid": "ef19baca-5dbd-47f4-9ff1-6f08f9059e28"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "56cda77a320b3cfbbfe5e1eb818f8abe",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e4cb9d1b-c263-4e72-a848-915a2fb877a9"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "0d2795d63eff30382c17a44639995b5e56564ea2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "69af45bf-182a-46ac-a524-b4ec1d8c9d9e"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "d3e92988e0c616f054220d238b76a4a68f15547adc7f9b1e8c5abc199c306706",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1ef0dbb0-22e3-43b5-a69d-4b2d6b8d8949"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "18b1856853135518a06e4c1467a569e47ff551f5f9b3ca528fd3896f0aeb93bde3b54439ccc5415025d369f4e0b95ae73ed8edce493954b8ab83c7f34bf30ac2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "89495fce-4d4a-4bac-a73b-4fd20c1d0747"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:wD0sc/cytcPa9M34/L6/sGVFx39Wot0F5ttVAZ2F8patDLX:wacytIaG3GO/pVFx3ci0Frt+MF8p2HX",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1ef88778-55eb-4424-90ba-94913ec617da"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d7bf8eb3-19e9-4aad-92b8-3a95c884e22d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:49.000Z",
            "modified": "2021-06-19T07:15:49.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "c03f69a2-57d8-493a-92d6-fe16f99cab5b"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "109568",
                    "category": "Other",
                    "uuid": "f82071ff-68e0-4cdf-a806-0e560e03162a"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.8367064851345",
                    "category": "Other",
                    "uuid": "401675c5-1907-41f8-826c-6a9c24bae37d"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "c2f903dd844c290e1778f9b1956b5e3a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "62a8d214-05dd-48e1-a893-79cc877fffdc"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "7411f92a0e96519a2c2babcf23af488251aa695b",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "cece7d80-a32b-4ba6-b436-6cbb9047dbce"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "d126053a505dd4be9f4f6314a2f513a39fa8c1bfd472fc01d54fb41433d0eafc",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b391fbef-13f5-4cf5-b8dd-d54d5222a180"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "04f186bc509f54305963cdf2200efe4660e926d276c4cdf3450583c1e2657b23bbe00f1e99c503bbcf342542c1c996961fad049d56fc337425dbdf4177be810f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5408850f-a2ca-4d52-a471-7935ca61c5f8"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "1536:QWXOQwi6wEBxmTSp3EpoNyq+4lRX6IHOSyOVi77:QKOQwNOT+eFq+4lAvOi7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d18191d6-06c0-4e04-a427-ca8d2fe3dd0a"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--c41067d8-f1e0-4a79-b653-b1de3a333983",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:50.000Z",
            "modified": "2021-06-19T07:15:50.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "7f478b35-0275-4416-9590-e6f5013f4505"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "6144",
                    "category": "Other",
                    "uuid": "d64d1dcb-0752-44d4-991e-9e115c13ad11"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0216588985258",
                    "category": "Other",
                    "uuid": "09698219-24b4-4661-a4ca-bc10259e574b"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "d95c252424ff0222f4e9aae3ad461c57",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7635d5e1-6de6-4de4-ab3d-9148a3bd258f"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "694eaadc11895e88b9bffbeb250a95b9913c2917",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "8843aefd-0ca0-47b8-af7b-780140bcda26"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "761aa5997b2fbbf52dc0225df16a0ba111246e31b7915d3e8dc316adc0b09bdc",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d02e3fed-7c73-43e1-a3c8-5fe9f3f86417"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "ee20b57ddd887761a758d8ba26e0b4c641dae84f945f995ff3dabe3e51d5dd9b11c7614907e5b99c075cf9139a2ceabd05430240d8fa12dfbc96dd64f8a3359c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e02ca84a-3de1-4a50-bba5-7f0f163b4fc9"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:bJhcyN+iiPca9M34/L6/sGyGOVCTAy3L4i39DEKdsVPTilD3r:bhN+ivaG3GO/pyBA30i3X2POlDb",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c5ec40c5-39d8-409b-aba0-ea4a9e124b3a"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d54701ff-0998-4d1d-a226-52968b38688e",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:50.000Z",
            "modified": "2021-06-19T07:15:50.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "75e744c1-0359-4e78-9bac-7d570c2b5b35"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5120",
                    "category": "Other",
                    "uuid": "9aac0cb2-4310-44f2-82a6-277e4ae30ea5"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.9696789438541",
                    "category": "Other",
                    "uuid": "be7e74dc-1fe5-4cb6-bd58-65a72f7f9111"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5254471169d40804343c29a0c7c2c756",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "df3fb9c0-fff0-46ee-b863-b7e0a0498149"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "b879e7313f3d05f12df64bb127636e6da1d6b13d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "91ce8303-5e8c-4cfb-91b2-2fcd2f50a02c"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e05febf89b27e15fff85688ebe072fe1c21a909a25c1c950283eacef1db09062",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "72e90c64-bdd9-4d15-bdde-b27664136af3"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "bb20fe30a57a33e0afcddef4ffe80634714df3ee66cc0a1d9447439b5fb611679ee450c77d16fdc4f33992abeb2bb5c1a3cc548de9b420cf8be5ecfb40c3c6b0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a7a2e169-907f-47f9-804a-0de16590f22c"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:6oDC2bjNUtWh0G3yJR20gltKdJdvPf/4v9K4RV:RC2bJUISPNglwPv2K4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d3b6d507-4123-4116-92f4-aa9f81dd6cdd"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--5460049c-12dc-4c6b-ad1b-574ee6e27b46",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:51.000Z",
            "modified": "2021-06-19T07:15:51.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "2a97749c-b384-4b9e-b24c-c2d08799278a"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "73216",
                    "category": "Other",
                    "uuid": "7400dedd-67cd-4278-9e50-1c6b69dd6bf2"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.6460112902163",
                    "category": "Other",
                    "uuid": "5a288f2f-7da0-4007-b264-c4512de65b2b"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "ba122448e9e534fc1bd66fe1e20c2817",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "03d9c5be-3fc0-43b5-8f12-befc2f42af15"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "55cd8e9b39a5269edae46760f3015496d61ed417",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e8c125a5-adab-4b88-8953-da755f5e68b6"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "c8e8917bf6b5f311173b7652240c8d752e83d8354e00ccfb42e18d9539decc81",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "199923a3-650d-4033-9bdf-23b556cba695"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "87bee0f652995ae0a2432115271d90be033996e215c32356d541274ee6331590a0442d1c064cf81bd0d5875841d426b5824b5b8a61e3666daa19bdb5a457be63",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0c4fa4d2-fe70-4c9a-afa5-91efb540a3aa"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "1536:tF4UxFgiCmlggnF549biIJWiwmYRWLGZxu7QTb6BRIAxKKM36h/do9zcEruQYf:t3Jlggn749TgxSGZxu7yb6BGCKKMA/2C",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c9d5275e-8af3-4691-8cb6-7602464a2e8b"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--8ac5b696-de49-428d-8edc-8ac677efef52",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:52.000Z",
            "modified": "2021-06-19T07:15:52.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "6be7726c-6525-4344-ada2-ac45b2575876"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "29184",
                    "category": "Other",
                    "uuid": "7a86bf4d-1444-42bf-8e6e-2d5814322b48"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.1292811401258",
                    "category": "Other",
                    "uuid": "358c19ab-6fd9-4b12-9d8f-dcb9e6453ff3"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "256a7bc964bed0b763853e7d06254cf0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e6d532c1-f399-4109-87c3-2ffe5b61e8ec"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "230666307a7060e10f26a9ec7b14631391b6d3ee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9b08dd66-08dd-46e1-84b4-664133390f3f"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "f41d59e5ea021a69e5b9a3a546a9b5b4f4ac256b802c53403b4984b74adf8334",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "15d8eb08-03f1-4836-815a-259bdf7aa81b"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "d708e62fb30c8f00d40ea1dadb0e4a31e43cca5dc00ef31f67d3927d92409605edba5a87ff2ce841eeb148b5a9e65460b6bd21008ca263662cf30d39ebbb07c8",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "88bb9966-d1b2-47f8-b24e-4925b46ff582"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "768:AgCQxRalWkTsWAg83cd7zBD9vmOCP3gED3m:AWalLsW8cd7lzCPQmm",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "978dc06c-0ddf-4a9e-8e6b-9d62fa5bfa8c"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--8688dd97-17cc-426c-99a8-663fb002ae49",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:52.000Z",
            "modified": "2021-06-19T07:15:52.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "a7ff5a1d-b58d-4a45-9410-78b2e68efb4c"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2560",
                    "category": "Other",
                    "uuid": "7952bef5-48f5-473e-95ae-eeda78e4bb26"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "2.1461655382031",
                    "category": "Other",
                    "uuid": "8c40f6f1-7771-49e9-8bae-52968f36d358"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "e6ddbb0c98bdbc5cb6ef5e47332ef148",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "51c73a96-597a-4a78-8321-364091bcbfdc"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "1bc4fcb6cf6b3a452a53d3dd0890fcc26ac878d6",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1b8f53b3-4df3-4084-b56a-e0ab9d0d7b90"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "4f6d5b6cb5664c7fa5cdf5149aa3842cfb6c8fc98fdddad8f3e688a36879a5ab",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "bedea244-7145-4aa3-8043-f0f89dcc9ba3"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "fb98d03b2c9bbc1351c04454c6924d792dd6c83e92aea6cd40f21ad306984dcbf610261d55fce683e621dec095f329b49ec66a8cafb43e96db85147690ef0dd7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d29d5b96-dec3-4b25-ba39-f5b5abf85464"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "12:pi2DX6nhiE04LF6LO5SfXMvmNKzuW6LO5SfXMvmNKzuXhB/q0qeUcKgBFyXXXXXQ:FIF6uSkeKv6uSkeK8hBSq6h/CScSdu",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c871ef8a-c0df-488e-9c6a-be8d7f2919c7"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--0e9b987d-c99f-483c-9bf8-40d0adb31ba7",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:52.000Z",
            "modified": "2021-06-19T07:15:52.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "df09274d-513f-46bb-865c-a0b6631535a8"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "4608",
                    "category": "Other",
                    "uuid": "5c35fff8-b20f-42c5-86fc-6c5a1255f0f9"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.5342268114962",
                    "category": "Other",
                    "uuid": "f9680b36-2f73-4f1f-bae7-182d30648d7e"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "d85fe860a8751a320647388fdfd485b4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1e514782-687f-410f-a3a2-d5c04edc5986"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "e4076bc60d87609162518e9d651c39b3554cfa70",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "069b6cfe-c212-418f-a2a5-515975e4fe98"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "0c20438725be27a7af290c3634341b54c971d2407b0b4b482b0dca81fbe813da",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a770e3f3-cce2-453d-b478-6d7d0eeae3ca"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "efe8f55288934db25667545a7382f36c496a6d16263ad489613ed5c42dca8bb06ba435764c2cbbe5dcb0420a174ac20c1ee3cdaf4c01905843fa08f0bde8fbf0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "203c0c56-032a-4ef8-9b22-bcd2370f630d"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:kt+f9W+sN2GU7doIH+t3+uNE7sBpnnnGbGkmnqjnnSDs:A+VWBsWIH8ZgQnGb5mkes",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ebc674bb-b783-45b2-b7f7-e61b451751b6"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--e92bb5ad-f7e0-4f31-a7a2-8091fa441d02",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:53.000Z",
            "modified": "2021-06-19T07:15:53.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "d03a7d53-b1ba-453a-9ae6-eb1b4f8b42e8"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5632",
                    "category": "Other",
                    "uuid": "c84431da-d6bf-47d7-9bf2-729af75c2cf7"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0629575138343",
                    "category": "Other",
                    "uuid": "6bbfc2c5-9444-41f7-80a4-bfae4ab9f207"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "0dca461c1012640bb1985540881084f9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "68a008f2-e456-4215-957e-beced2c29922"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "8c61e395d24967ebdcbff73eb8d32c460f606e44",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a6034f77-b46e-46ad-8641-0d98937a891a"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "2894f5e511f54f4c17452782967a436b750f0c7bb5a59cf7bb26608ef196bd25",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ec9bf6cd-0923-4ff3-b3f8-5a3a0a2b79f4"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "18f5a748127ca2860aab7e0f409bac7ed508411da9d360524b35708a843a738314fcd08fc56568d6677ab8ce5de34cd623d1fa0643d098704c199f8aa43f775c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4ec76269-ea47-4330-9f65-d017c724984e"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:wD0sc/cytcPa9M34/L6/sGVGb39Wot0F5tWVAZ20nQaey1ae:wacytIaG3GO/pVGb3ci0FrW+M0nQryz",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "af18d250-d370-40b2-a247-ef142bb104ea"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--ae6ea4c4-1136-41b1-a103-b760a5d6b949",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:53.000Z",
            "modified": "2021-06-19T07:15:53.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "8ed18e5b-7e5e-4f05-8c62-e5fae97974b3"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "109568",
                    "category": "Other",
                    "uuid": "f4f04e39-ce0d-4e7f-9e3e-60b3d09fde9e"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.8356487190746",
                    "category": "Other",
                    "uuid": "9b988502-fafe-4656-93ae-b6aacd3aa16d"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "16de5f9c14fe90eaf907e43e0e90cd0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c7ba4be4-0789-4173-afeb-fee59dc4c715"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "d0c5dcdf0f57839036d81f57e9b1eaf39dcbb6fc",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "53edcc6c-fde1-47c5-87a3-c973f99d2d44"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "28a43e17fa80f38df5d39a1e7f4a1cff93c4925f3ccf79b6cc1c67cb558fb025",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "822e4a5c-0802-47d8-b360-9f4f50e8f3e9"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "3699000880f31578366c5c46502acd84c6ddc82affa45ea3553487217fb6b857a742218e943bd2c094fdf9d0ac5520b705801041782e619fcdc8547e3e455e0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e831236a-a24c-4d65-9bc5-d5a66c7aca3e"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "1536:iWXOQwi6wEBxmT33U/aNyq+4lRX6IHnsOVi7s:iKOQwNOTH47q+4lAezi7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "20d12826-f7c4-4f43-8e2b-25a9b920913e"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--98c6cb34-b6c8-46d0-a6ff-c5c01732510a",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "2e0b8998-ae45-4c1a-b944-0b1e72261e10"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "26624",
                    "category": "Other",
                    "uuid": "c475d2ae-4176-45ed-bd1f-c0a75ad9c73c"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.3151171440822",
                    "category": "Other",
                    "uuid": "a7357e68-1a73-426f-91f4-7ced0116f7e8"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cf0b16eca2aedff96b586a2add8e956e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f6034d0c-e06e-437f-848d-a358721ce667"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6b3099c00646a54d25d96c0d9a3394463394083d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "adb742e4-6f03-4f01-87de-fb5285e677ee"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e64daa8926bfab138ddbe16a1f84ff4dd67984b06d0d908fecab21f051e7786a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "66f3d0d9-4653-4ee5-9a12-2df850b8588c"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "f408833fd42da728bd7f89f4e288a4fbe1651cff3a26fa911cd09f845302d678c70037ceb36b3d58dba910d1b93ec602fa0f9ac13ae63936c4332d4c0f89c049",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "bc76fbea-f0ce-41d8-94df-7b1457416cb5"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:T7ptyfdBgZqCq6pWKksgl2IYdSuC2WigRelS1K8C1x2i7JxhsmuH40m+wMe3ifsY:T1ZqCQKy8IYdfWiUelR36ihR6nmRYsY",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3738d1a6-ddd4-4443-b63b-138af26016d3"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--86fb9914-7d7b-4236-9abd-9d102ce95d08",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "3b3ad8b7-b0b0-487a-80b0-be80be3a344f"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "4096",
                    "category": "Other",
                    "uuid": "747b77c5-a867-4a6c-9613-b104900f48c6"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.5653063746933",
                    "category": "Other",
                    "uuid": "975502ac-c370-497a-aff3-bfe13b1d7c69"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "d5cc9dcb8f2e36237c1895d9de49de46",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "22bbef16-0cd9-4cac-a24d-1811fcd74eee"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "c96c6dcbed0c58f3cc2253157395b66bb1e2fc9f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "27d7923a-0e61-486d-a569-5d94e11138db"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "5d2c59d196897e18445d7dc7d3ff2875a32449ce55fc2d47d6d38661aa9f2a38",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "77f7e933-6c5d-4c4c-a585-1297ac7d8b43"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "1dfc4a8ca1abfbfdb93f20d13ef88dd589c837eaffe2c2a908bb763d0cd4841e78a2bba8b7598b520397cd57aa22de1eda324da1a35e44f5ed1323106548046d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c3a4ec42-543a-469f-8cb3-18005ee1242a"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:rwcdILFDTZ8qNEFw6QNOqiKsBAXpQXQcPhhpHP52VosLHMEiLnRVsxO3YU4dTh+s:r4Cxefz4ZR2SsaROOrOBEM",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b4ae9fbf-d9b0-4219-80ae-9f61f4797fcc"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--bc94cea5-59b0-49c6-b478-db6deb6213ee",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "0685919c-504a-4904-8cde-9d978d104bac"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "10752",
                    "category": "Other",
                    "uuid": "dc928a7a-e274-450f-9ada-65a210568f50"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "0.6671192572015",
                    "category": "Other",
                    "uuid": "16f0e3bb-543d-45e3-b68a-789a637b1ec7"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cdfba2ba88c72647f5347a2835bfd043",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f814fc1e-4bc4-4509-b61e-902e976ca152"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "da6a4ffcc7026a22fc6df5b886285f194680b0ad",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3779cc80-fd22-4210-aec4-88dd6103ccb4"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "b5ca2985dcaf1bffd87922bf5ae6425012d9ebea70b1f9ec5ea7bc212c37cb25",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "876955c2-d4c7-409c-ba61-28ee21bc786f"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "6ccf8b884e64df2a4074d994d97f287f43a263614ebd91597dbe5de0a5f3c48b288260fcbf3e382b4860747a6da9d03e5f7c8e483d81f1e236dd59ba833bd31e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4f57785e-fdf9-4a06-996d-3c054a791369"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:W5xK9PJtoa+0SC8gTMCkzVk1yu6wnffu6wnfX6/1nS:aK9PJto8SbgQW196w+6wP6/9S",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "63f7e973-4276-4581-b53f-7beb3767caad"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--244e9eec-ff34-4fd9-9899-5259e99af7f1",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".pdata",
                    "category": "Other",
                    "uuid": "52b91feb-574d-4827-8673-9a41b7b83489"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "6bbf9100-a7d7-4a7e-b3d3-a0ab80bb4f36"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.4171417196239",
                    "category": "Other",
                    "uuid": "9f2b4212-bbb8-4f99-887f-e5faeec40ad3"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "af11065588ff1be5e27be4cd684508b9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f1a1c6fe-50a1-4031-9577-4433f2515849"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "5aca630b4b10132b3933a7919d630b37a2d77e4a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6f17ca9f-2da1-49c1-80f2-ba22e8536bb2"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "20b45bf068739ca996e0b62119b8f06045946193bd1fee9e963eab141b90865d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f227bc46-ad4f-4be1-9951-76c820a53724"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "67c859d7e9cc3a0a0dafffdec1e2cc1a3950c32a9655d38520b9670df9a213bf29ce2c00c2e50e3fa24f999cc45c3dc748ca75121244a95a41a8bc447e38d8e0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5e87e5d5-2ac1-4d8b-8027-c551e6f611b9"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:rLIjwvEE2vBxBtsyzw1o9/PlmOOKbcyIp341BqCLoosPTLiZeS7:PcwCBxfzw12FmGbc+CHlLi77",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "2695c642-e4c4-4b1f-a263-fc6cc31e60ed"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--c4f4dbf3-50b0-40bf-b658-9775ffec4b0d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "INIT",
                    "category": "Other",
                    "uuid": "90df9187-12a1-4a9a-bc9e-ba9a56255030"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3584",
                    "category": "Other",
                    "uuid": "2dfc5d88-d058-4c9d-8d5c-1269500b5cad"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.1718697425243",
                    "category": "Other",
                    "uuid": "5fd52953-4a9d-4a06-9f89-a21b3712f5d5"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "bf3aaff8a4f25625c50651a235f234ea",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e9155182-a74d-49cb-9483-76002eb3bf95"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "efa19aba8be359ef3d1671eea2533d40a8ad3574",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5b3388db-ba5c-422e-9f98-18523fc7dcdc"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "0df32b5ab983d4f13d1f4d350e1a92f66e41350711886943720894025588ea7a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "73fb5641-6da3-4133-9160-70ece5d586ea"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "b3d5d87dfff44bc6cbf37f4f514c223bff7229ac93342c2754effb6d6b5a91fd01939160e5ef37c5edb66ae94670b7ef9387004102d1aa6aa128a32bd7f31bee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "51c07fea-a0d9-4dec-850c-0afe58444cab"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:qjHwcdILFDTZ8qNeDYDOjNe7kBtWt2BpRbD+KCm7MuINTg3nuO4EgdW/lLWfe:qjH4ChDY6A2BXbD1XN2EgdW/lLW2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "2f69ab94-3736-4933-9f2b-844c7b1bf5dc"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d09fb46e-5fa5-49a2-86dd-f3d8d1804c8b",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:54.000Z",
            "modified": "2021-06-19T07:15:54.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "6c0d541a-f913-479e-9c44-7dc09de2f4fb"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "c4a4e5ee-c908-4099-8129-1d666e41dacd"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "3.6204816846131",
                    "category": "Other",
                    "uuid": "988aefc6-90d7-4478-b132-36017511684e"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "fcb8a85ae2d11c0aefad6b5535e1bc90",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "43baf62c-92fb-4465-8e75-228d9e19c881"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "12c935664a10eea034a86053d7dad2c872d582e7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d8a7aef5-5374-4182-ae0a-251bb5cb8a6a"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "199727264dad79db742e501ee665c0adb8a5e08f70158dd23a8780663e330e0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a59d2d2b-aaa1-4ba1-bd3d-5dce2c938a02"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "aa6cd28eb6eb70ef70229126734a359aed53a505608162ee9462c5bbdc9790e4c35336c52f39941988c3f7c9ee8b4c1d53c9e44b241bf2dd75cb827a61777419",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "91f7ba58-af6c-4f65-9f9b-6989d2c3c660"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:X96q9llvt1CtC4/:0+6tC4/",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "08a35045-8cfa-4523-b4a1-09018220b0b2"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--e6358f45-c3fa-44be-ab85-eb8ae2b92b26",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:55.000Z",
            "modified": "2021-06-19T07:15:55.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "5376e206-5b63-4dda-ab8b-b09cbc62dba5"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "6144",
                    "category": "Other",
                    "uuid": "7abee9c1-9503-4d90-b2bd-ad41c166e7d3"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0220033275988",
                    "category": "Other",
                    "uuid": "22552293-f2fd-4402-b35a-090c3675e29c"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "99a48e94880084ad9c1924a5dcaaf54b",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "844fc2b3-3d7b-4420-88d5-b4f7b204b39b"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "71b2600a416d9883cf9e063fc75ec4fbd9f8a57f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "2d9950e8-d988-47c6-8b4d-b44fa7cb8588"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "76bafec380341efddd6ff5753c579f1aa5a6ff969d32d36747a0e9549149ebe0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "bcfafe4e-003f-4849-99c4-6f8a78289fdc"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "951f54dabfc574acec7a32359214c3614685e306a96cae0b0d60cd51556f70c5eb0a246191073c094b64c87734ca177be8a94d8571eafc02aaf430cc47befd65",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "86288a4e-4ad1-4621-9ae8-70d5f64ccf34"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:q86Bc6RteCoca9M34/L6/sGTmuViTAy3L4i39jbpSR+ePb+cSr:74teCocaG3GO/pTBg30i3BcPb+7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "12f620e7-b513-4806-a1fd-186642a6621d"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--94756020-94fb-42da-ac3c-9307d2670cc4",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:55.000Z",
            "modified": "2021-06-19T07:15:55.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "5120d398-fe65-4bbb-a455-c844c1823577"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5120",
                    "category": "Other",
                    "uuid": "a127b6eb-363e-4f2b-9372-eb36bf1df5ef"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.9696789438541",
                    "category": "Other",
                    "uuid": "ed336a9e-459a-436a-a410-47d58265b082"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5254471169d40804343c29a0c7c2c756",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "93c2dc72-a6f4-4990-bd18-217f207a2e28"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "b879e7313f3d05f12df64bb127636e6da1d6b13d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "dbdb49d5-38b8-46d8-8bf8-f7ce9da4699c"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e05febf89b27e15fff85688ebe072fe1c21a909a25c1c950283eacef1db09062",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "220d5d42-9c1b-48cc-aa8d-1420ad1fb1f2"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "bb20fe30a57a33e0afcddef4ffe80634714df3ee66cc0a1d9447439b5fb611679ee450c77d16fdc4f33992abeb2bb5c1a3cc548de9b420cf8be5ecfb40c3c6b0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f06431fa-5a33-4c26-ab92-e2e2ae80ede6"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:6oDC2bjNUtWh0G3yJR20gltKdJdvPf/4v9K4RV:RC2bJUISPNglwPv2K4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "19fde9ac-a645-4abe-899f-061249ef3016"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--e85cde67-3817-48d8-b6ed-a1415aec0e57",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:56.000Z",
            "modified": "2021-06-19T07:15:56.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "f0edcb98-a9bd-4aa9-bfd2-2fc7576701cb"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "7168",
                    "category": "Other",
                    "uuid": "d547277e-98f7-4a1d-a03e-f23d708d24e3"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0916181299081",
                    "category": "Other",
                    "uuid": "cac6552a-345a-4d79-895b-a99ba82170d5"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cfdcf4e026b658096360b3074dc64976",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "373de5f6-4d46-4c5b-a5de-00bc611fbd52"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "f994d8177a07b53a4fd00e17fc1809815c4132d3",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "58089344-1d73-461b-8fab-d97a4f7336cb"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "1d797c47b69b5d7a736b9d5b898d461b37a303e1e70c1857fc572c5b92cc86c2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f1b43456-23e8-4a0b-9c34-82271ed29b48"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "8a52615ba3ee6d0f8ae42a11eb508236fb1530cd309c9e617b1f65bd5e4160d6d2a130ebb723a32918ee9b71903c4a94ce65d85d58a8c2ba377c9a608bb6b6b2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "202ec508-615e-4daf-881b-9d9ad17ac87e"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:iNXc7HaQ3oNa9M34/L6/sGfg9K8NIAY3L2J398FcXu/wVgYdEB8m:iCaQ3qaG3GO/pfg9m3CJ3Mc+YeZBR",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "09848400-21a6-4fc9-b0b3-93396c21ca13"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--07a39763-3d47-44d3-bf12-fec30f348026",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:56.000Z",
            "modified": "2021-06-19T07:15:56.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "9e7d93d5-9e91-4dc9-96a0-1e4a4b2f6aa5"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "856e1e8c-3048-44ad-9698-2b641eaebcc7"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.8235535794019",
                    "category": "Other",
                    "uuid": "83ce773f-3914-4cac-a750-fadcb6664e2f"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "b71e24a232cbf15c55c58f0bbe722b68",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c2a88acf-886d-4c00-ae62-590862c69935"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "5147860b708a336da3f27920a1b729390dc93e06",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7759e405-7d79-44ac-bd52-2883b17a7ff1"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "9dd20c4ff51c2ea26bc0acb7f8d64de68957b31616dad2ae6225eb204ebbd934",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f2f09075-86b3-4c1f-8d40-0e59ec6b0b01"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "8be573ee5247c2167275697fe355042439ac78dac64b228e095d60092ca3e46fc13e094b48d6dd533b8451b819f5b10567b07994f4624ba35e67e46d1686bbd9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c55de3ce-f08e-41b8-90d2-6a02b7ab968d"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:ChoqgiPO4TCO18D8aUqSt9RwkrXkr99dIAMnF9AIaPPTW:6o9iPf/uSpzo99KI7HS",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a70a74eb-e8d4-4fd1-8997-1acd1e369798"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--1fa704f1-5526-4c00-98ad-970a36b2b688",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "3caad570-754e-411c-a82d-30e0ad85d47a"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "6144",
                    "category": "Other",
                    "uuid": "ddefdc49-61eb-485b-ac6e-87f20d1fffa1"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0204417084589",
                    "category": "Other",
                    "uuid": "921cd159-cdb4-4ff7-abcf-7ff41639b69c"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "54d67a3e6b7fefaa850dc0a355a95188",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ebd9453d-f93f-4e1b-9859-fea1d5950026"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "22f269d22ce15e39755bcf324768ea33a1bbc5f6",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a2889a95-d8b5-4285-b213-67e91adf3bbf"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "70016a2861fe99117c570b93f0d3fc711c3bfb2ef150ad2d851ac0adf82cb930",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3b87ab8f-6121-4bc9-a87d-e2c866c065aa"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "970bec109da07499c4500396b597d0c4886b495d2bd0ec2a45f0e05e1ff991cb4466c9b68a22a914b8a5fe9cf2129246ee6b0ba06b87f7c2dde51a503442ad46",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4b885039-f911-46d9-98d9-c1384e409753"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:bJhcyN+iiPca9M34/L6/sGyGOVCPA23L4i39D0LKapPrTi5DnDU:bhN+ivaG3GO/pyBg30i3yPK5DDU",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f8ebd098-11b7-4db4-afb6-9496c3361a00"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--bdfcfd96-ec37-44e2-b012-6729b188db11",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:57.000Z",
            "modified": "2021-06-19T07:15:57.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "ce168081-6584-4012-9a06-e3a00aa328db"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5120",
                    "category": "Other",
                    "uuid": "04355250-4273-4be5-80c5-e6d517a54a67"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.9533285792542",
                    "category": "Other",
                    "uuid": "ea621489-5808-41e6-a261-273a5f9acf43"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "0597c666cdd75b55383579f6268fee5e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "feb8b5f9-7b66-4fb2-929c-e4a55f4dc0f2"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "088f09b0e2b3fc880ec34578c1dcc2b6cc6462a7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b1957ba2-9cf3-415b-a4da-72ddf6262878"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "b8725d7bb0162108ea5e310deb5542ccd74122d04e4772e577d0c0616455f15f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "914648d5-87c3-4e93-80cb-2f6697ede0ab"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "4f7df59486f72ea45f492a0cac12f9fc1c8ba01662ac11a081fd738160bdb2e5f9af6e40b0a7c42ddf35cad907f9f2da80b60a3000c91e68f7615b2ba673ea56",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ea1a88ec-e076-4d15-9c79-dc705e8c7db4"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:6oDC2bjNUtWh0G3yJR20gltKdJlvPf/4v9K4RV:RC2bJUISPNglwXvWK4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "eec3f598-d87e-40f3-a1ad-c91f0a5e6dbd"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--5a0ff8c4-9323-474c-8f79-6f56e78b57fc",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:58.000Z",
            "modified": "2021-06-19T07:15:58.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "2bb66bc0-f0d9-4e36-83bd-e94c3d8d4c4a"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "518144",
                    "category": "Other",
                    "uuid": "a8319e65-c040-417b-a3ce-dd94f98432f6"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.8673939918433",
                    "category": "Other",
                    "uuid": "5f63af1b-f088-4764-9f5c-589629841285"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "b969ebdb64c9563cc78851c96faea37e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "042a7180-b6ac-4bfe-9124-8ab0d494b7e6"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "76a2222080f5240f6e0dfd2ee22898b52e090691",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9bc7e8eb-615d-437e-a384-017185e4d2bf"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e3a71e645f99a738e8e70e950baf8b7bad489cc493cfaa839978b5b37d7d6bad",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "8a6915d9-b6d7-422c-af39-e8c29e114c44"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "25540461f6c90af0a52f721dd400f8de3f20f3f14def0316fbce729b3667ed938ed19e26750310a88f83cb6e70b3ac0b3d92856e88d07a746076e20223266ec9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b0581489-949b-4f67-b25e-e1b5873248bf"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "6144:jzhRwaGlf2ofbRuNPMxJZWWXR6UVUmxTOdbRnveIks9HRizW9:jzLE3TRuNP8cU0UVUCINWns9QW9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b7be8cfd-da94-4c71-a8cf-4dec9cec9367"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--a13b139c-8971-44c6-bd15-771d74eef813",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:58.000Z",
            "modified": "2021-06-19T07:15:58.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "31210ba3-957a-4b44-a73f-9160c9b0474e"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "24064",
                    "category": "Other",
                    "uuid": "f6703156-86aa-444f-afc3-b2b4ecd362e8"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.9150635303897",
                    "category": "Other",
                    "uuid": "356e8777-4b0d-416f-9478-3d8688fa2537"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "1d5a9d5ff3f1175261f317147e4f6dcf",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "71db20aa-3a9d-4576-960f-fe105a1a0ac5"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "d85c9f849c542258e9966ddf478c84e25263f29f",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5d357cb3-f67b-4a1e-9d96-64be9b0ff213"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "08196d06dd7a83bda8222f41a1c164ef7d10def145796dbeaee09d1480fa60e5",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "744a8d8d-4d81-46a6-ae28-ca989b92319e"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "1f1c58d0ab7287996ed1ee9ef1895129946c0ed276973eec79ff3fedffb5d889ae53e5ea67f6724211abf8d295247579fb1872a2b3b15d4eb4967bf436270c22",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5544fd05-ff9a-4ce4-9f14-d8e7adf6242c"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:9iuQypdcMUsowNRD9HPmYsKFWFQkIUKbFMfstIcxrX34bLNB1rRpv:hcMrfDD9vmYtd9bmfs2cxrX349Bl/v",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "38764702-7208-4d50-a808-1b1c8ba299d7"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--0c46da1e-551f-4952-b183-0bf6281bae5d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:58.000Z",
            "modified": "2021-06-19T07:15:58.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "c70a5ce8-342c-46e5-bc6e-a17a18ae09c5"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2560",
                    "category": "Other",
                    "uuid": "30eb6ddf-28a1-4ec1-9df9-ecedb38533cc"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "1.7882408653491",
                    "category": "Other",
                    "uuid": "d40c15d1-6409-46ce-a9da-56b9e8e9c3d1"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "50efd9b25d8700e42055b6c74636e989",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d5e01126-d732-4063-befc-fba3141da780"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "09f570be50a16e269e24318b22fe1175ae5c1b4e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ddaf6803-699b-4134-a2ee-68a80f52e7bc"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "10c99649385d6358095abcb6202fcfc3caf9a43c06caf9d83fb0365a9d94e3f2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "dca8b99e-f2d0-4f52-8446-e78d1c42ad01"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "7be428bf41aff729e1172fa04b7025b57fc798e669f69b91079f2b7ad326190d9893d0743a37b4246aab7c1c4c4c8a741fe5f61b424c0af3b29fc2d141cc55d1",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "261c4657-5c86-41bd-a0f2-8ac9238f030a"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "12:llTv6LO5SfXMvmNKzuW6LO5SfXMvmNKzuXhB/q0qeUcKgBF51E0anX6Ov66666TN:P6uSkeKv6uSkeK8hBSqCnF66666s",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "43cfee1c-5623-4e8f-959c-4b207522c6c2"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--c13b7e6b-312e-4ad8-bfcb-0ca5d14c40c4",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:58.000Z",
            "modified": "2021-06-19T07:15:58.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".00cfg",
                    "category": "Other",
                    "uuid": "1e10d498-fd0a-4a86-971e-addc27ab781f"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "903b5655-af31-41d7-96e6-4315a27f6270"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "2",
                    "category": "Other",
                    "uuid": "b385082f-686b-4acd-8c4a-51edc4c1eb2f"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "c89f7a0f9778f92a5e219125b3610d61",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "001d07cc-f276-474d-ac2b-25043c97e43e"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "a329b23c1e44534bb0a54715aa5449b9a6ba1273",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "96e7b658-0364-421d-a21e-f2ce3e227f47"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "184d506c38a5a5a9528f8394e7b0ba122b31031884745843b863ea8903d127bf",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7dbb3330-b267-42ca-a672-fb54f311efb2"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "460a964985c9821b63904a28aca58af8af206acedaa9a6dca4cc563d6581c7d56cebe89bc53384a643e1c8baafdb88aa7c21dcf5b8cfd77dbe7a8e3e79853e56",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "56ed64e5-1ac1-407a-8834-a35752eeb807"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:Vln:Pn",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "8a4aa359-3cae-45e5-8b59-6e25d392f1ae"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--9f405895-ce3c-457d-93a3-572d4c91dff4",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:59.000Z",
            "modified": "2021-06-19T07:15:59.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".voltbl",
                    "category": "Other",
                    "uuid": "7cded3d8-0ab8-46e1-8764-20eb338f9d59"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "c6f40655-319b-4ba8-8fa4-2b92620703f4"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.5778529113994",
                    "category": "Other",
                    "uuid": "69a94707-2211-45fa-8a67-c2f708ee98c6"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "40a0cfdc483f27981dc1db763d8e6625",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e3440dff-b714-4528-b914-b665909e35c3"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "630388842d3a04ede7a9632cd0f5ddedda3b167d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7db56222-e4e8-406d-aaba-417c0efaf78e"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "889f9db49e469827c2d037407bbc1b72b3e5f6773d4e7ef14b8957b0a6384e73",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "c53aaffc-756f-4115-946b-906146b3a09c"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "c68aed826791932e6ed98f33347b42290984b944ff4e0b0aff020d80fbb9c236e0324c66785cd955dcf6a91a46cd0559e674bcec8d782000ec5061764064cb41",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "88c55d4d-2c79-444f-9b29-6205516f7505"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:ggY/k26fl09zaQxNo9AXL+Eeun:dY/kY9zxx69Lu",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b186f177-d4a9-4698-8ad6-c680587d7644"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--763f4304-eed1-4c21-956f-2cbcc23e338d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:15:59.000Z",
            "modified": "2021-06-19T07:15:59.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "448234de-ee37-4a88-8fa4-447836670495"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "24576",
                    "category": "Other",
                    "uuid": "b7cd39c0-bcea-44bb-90c9-dcb77639e51d"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.8135056523198",
                    "category": "Other",
                    "uuid": "caa71d71-9a19-4082-8c34-cea6f7e53117"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "74844ffef4749a1b7298478eead63864",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5b4ed82b-4372-4883-bfb9-4011292520de"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "4ccad7c12baa6c312a69e6c9e42cb875990d8848",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e5726284-022f-4b42-b325-a0ce177db178"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e144113e0a4424225dbc5051eea67883a4cec1b40e2a3ec680113b832a7d25c6",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "8a99e0ac-2311-44b9-a2f6-84bbee0f314a"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "c8dacedb1adf163ecd1ab0cd396bfc9ff392928c31b664cad26003d3aec69b7f938e2517fac873c3318ccec948cba73c64c98514a0be9469c001691089f29437",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ee2c951f-2f9d-4203-bbfc-970045bf6270"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:V8OAwsGu8F13CPM4ACvM4ox8O+CbWriYr9dCHw25zLNqOF7kGXdaNjOdwW5ImiVS:VXoZM49knCtzr9Iw8NqOdkCAN2wWZiVS",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9e953b60-3001-4361-bc7a-660e8d093b07"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--695b2e91-223f-48cf-abda-0b224cd0dbe0",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "b069a73e-39f4-42e2-944d-e607f9286d97"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "24064",
                    "category": "Other",
                    "uuid": "14cd008b-50fa-4832-b73d-cae63ef145af"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.3405794123405",
                    "category": "Other",
                    "uuid": "d768b582-c7ce-4e35-9660-60aaf38e325e"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "776e79f0764eff801aae771252c3fa02",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "71fee3ad-da5f-4924-a8fd-e80300055746"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "4024c296618817b9b35df8e78a2e610e3a7e2251",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9fc5077e-7b14-4565-b91e-6fde2ce617e5"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "b3a1f978c3c288ba58f7540ab0d596d698eb1a450a57abda3c1cc07e19114407",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "bd14bb07-55e9-45ed-ba5f-9fa7772ce014"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a56dcd5211f03861d13d14f04142c262750d3717bf589277ab47e1d496dac3d2cbcb6a6627486a33bde3202ab1d42ede030d736f597a7314ec2d3db82dd79ca0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9d0c97ee-d861-47f1-99dc-0f582ec4c9b1"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:h21YxntngRRPOQaniVXgMmZku8YcTTO58N1ZQdY2x4qyg+3h:hWetQRPOQaniqkpY0O5w8dBxmTR",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ecdb08e6-66a5-4af1-b588-1bf6656e82e3"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--63384292-3560-4fa2-8a58-2c7f60f64260",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "cb47e4f1-7e3d-472c-85d1-9360eb4d69f4"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "1536",
                    "category": "Other",
                    "uuid": "83641f64-5997-4a0d-a9c6-69ad022f37b2"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.5724257089827",
                    "category": "Other",
                    "uuid": "3646fdfb-a79c-419b-91e1-f9b47894e3c4"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "23e21b5423c0eb4e7c8dc80651c96527",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3c83bd12-3123-43e8-bcbb-b03d2a03ccaf"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "a9d589716ca04f76fc41d2441edc5e9effd615c7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a3651ebb-696d-4832-9b7b-86c9af9421b1"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "3ab921929a9cf31f030f4bd6bf70921451510d7c7fd99201db4fcca566ad8373",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "051fd022-7e2b-4abb-9ea3-39d50aa96d85"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "1394f2b35f5e05e957a274f38e4a784f34b822015ebf0af15b7e84689268bf556761e40d91ed2fca15da1084fa9f7f65b0c6f601fa13b8856b7f267c0a5b87fc",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "10720745-f4a9-4f1d-96fb-95bd7275b845"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:VuYWgpPdowf+p7n3JAlYHj4OoSSWMU1w6QO/OOGrBOdNcSaFDVNyfwfQyxiEiTXS:sYbp5+52lWSWB1w6Q4OOeBqKSaZqsQWL",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b2b8a9d4-b31a-4697-9d68-1f176f2eeb91"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--11687ce6-7ff4-4aab-a60b-39ae2517d112",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "16832906-6dbc-4f70-ad7d-260686e39c19"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "10240",
                    "category": "Other",
                    "uuid": "2ff67ea9-ffd8-4287-a90a-2bf746e95605"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "0.68903575703687",
                    "category": "Other",
                    "uuid": "2b13d034-cd73-46b8-b147-3a5d94422a16"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "24aba87b5ee0f8eff228cff35e7fe22e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9ad05960-be10-4e50-b919-df3ef3c86fbc"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "7a44172ef63d69fcd213e024f94b532ceb8855ec",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "38eca73c-14db-46d5-8ae8-7a959b46f455"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "2df8a31269ff695570b9909bc7537c4c2883e95a6ee89fca7fb2ce90e8c6d559",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3b040581-6b82-41ef-8d10-651a973d7859"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "599a37e0ff591cb06be7f8f059222c2c2315c8bee65c213347a574228faf8030d1c0692e27f533738a36ec0535d0f575e7637098f8815f00fe41d0192fc2a3f5",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "825bdd6d-f930-42c7-85d3-9bec23206aa4"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:25xK9PJtoa+0SC8gTMC0zVk1yu6wnffu6wnfX6/1nSBtN:6K9PJto8SbgQm196w+6wP6/9SPN",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "778b5e59-1384-4229-8ee3-ec1d8cf2b900"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--3b50a303-b6bc-455d-bf36-3ebd14302773",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "INIT",
                    "category": "Other",
                    "uuid": "1a209102-e737-42da-ba28-1a7089334445"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3072",
                    "category": "Other",
                    "uuid": "f30adec8-b753-4660-95ea-7dbb7d458659"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.6744050867927",
                    "category": "Other",
                    "uuid": "536d71a1-9a3e-4885-bf31-6730d4e8698c"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5900abb4cd3dcf41ca91b58504b690d6",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e70e9b37-5e57-4e3c-95d9-da36916dc168"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6c02d86e3aa6caf28bf4c17e5e9ddb0113999b78",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f3b39fad-2ed6-4b40-986d-25cf37f519d0"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "4a819123fe7f7360495dec76b6fcb73b105bb87c5255df7650b15421b95f45e4",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6c8a34ef-4cf5-4787-b69c-ffcab26f253c"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "55fcc8138926964081972710e6ad7756dd42639dc25c65e166533c980720cdf489aa62bf6598e3ad871d12c6d5c7e0890c220cf12bb0fec6d010d755b4790679",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a7c19af8-f193-4cc6-aab7-38042ad87965"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:OM2DYbp5+52l1DYDOjNeYrOENPMgFBBTd98bCMQem7zPaTgcV5iHrXAm/lLWfU:Z28p5+52l1DY6h5PbBBv8bCjTvTAm/lf",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ae973a57-b20d-4c45-91ce-6c5ed46043b6"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--7e34aa06-bdea-47f4-8831-8df457b51504",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:00.000Z",
            "modified": "2021-06-19T07:16:00.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "ae4de669-f1a1-4588-b696-c33bbb755b3c"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "f53702d7-764b-46e6-af2e-f3305fcc59dc"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.678416291454",
                    "category": "Other",
                    "uuid": "b2c77ffa-7957-45fc-8336-8c41a4a08c7b"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "5697b274e4aaa5fdec318fcc871f591c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "55d2ad83-a9b4-48b2-a62f-2c68cc6bcf41"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "385859eef08a7554e5988d1c0a71b493c40bfc54",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3d86d61f-5657-4dd8-bc5c-3cea8c8b26b8"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "a35fedda00d2ae53ae9fffaf7307f6307f7c9c91c4bcf51c6973b5391da8c211",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "5d5863af-c84f-4944-8f00-b13141d72137"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a6594eccefe7cbd618ad9f03662c0cd3ee9fae5460ead576da8b902c6428f8a753132614c816efafc6b4b18805a41d2741760843e160fefae7029d2222eb4a7c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e5aa9142-94ba-4f46-8c62-ab9acafcc6d3"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:yjg+3sYgvUduAGpW2VBpYXhzRMClFvlXfFwXyWi11g2q5GjtBe2BLfJyUNmZWdeF:hn8kGXZvFF1ZqkjV5JYTAw",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b34ab6e2-7c3e-4ff5-ba51-f697dc46c280"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--a7655859-ee97-4f41-b84e-2e1fcb0205b2",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:01.000Z",
            "modified": "2021-06-19T07:16:01.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "808f5279-22bf-4af9-a194-d51f4de3b082"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "470016",
                    "category": "Other",
                    "uuid": "3b1518a9-e328-4535-b0d7-c266d8ef47f0"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.5436924987407",
                    "category": "Other",
                    "uuid": "b9ced296-4885-4566-bc4d-9d559a3f734e"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "fa7c25533908f8ca133a569f4d05ff19",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f7431fc2-5675-41b6-a31a-03d169ddbd9b"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "0dd36081fd8d797203a9b66f53fd4156eed45f88",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "97b885f1-7ecc-4273-9af1-b09a0f0cfb60"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "501612dbdb3dc22040a30897a6e00bc7c6971ef5eebe85ee1e26f052ab33d053",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0dd1117f-56bf-4744-902f-4330e534e2a8"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "14a433bb50405afbb084b490d9382d662882a1180a253e6bcff07c98e412ada52d80eb4e344e746b757d8467067a4b254357b783cb6ccf57d75f3eb6b788cf12",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d027820b-cd9a-4841-a655-7d8d9c7801fc"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "12288:43yoMayFrZ6j7CNWYE3EY3yWGnJmF92UO3Jr7v3t306zGo9:b/aUQ3EiEUF92UO3JrxnGY",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "385d4c5d-49e8-4678-8c5f-ec0d87c0b0ba"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--304b08a9-d17b-41b7-803f-9c572aac0bd3",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:01.000Z",
            "modified": "2021-06-19T07:16:01.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "1c6a2f9c-ffa2-4baa-9a5d-fa845e783658"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "102912",
                    "category": "Other",
                    "uuid": "9adb059c-e761-4ac3-976a-7bf66b56aeed"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.9050219782688",
                    "category": "Other",
                    "uuid": "529273f5-543d-4886-85c7-9c86e2ee5577"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "9ca50d952966036f9014c2eb7c49966e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e4a95cd3-7580-43f5-8c00-e70c91efe6af"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "dec3c1387042dc4972e4e47ec22f592128b55dfb",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "fe673c90-c8a3-4a41-9958-53e4faf82c5c"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "a113f5722a6e05ab62998e9981026ea0c3e9921c015bb17f16d2e6a5a941be86",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "fe8c1cc6-d747-4bc8-a8b8-48a6f71e205b"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "41b61f0ee1a785b4b50dc6bb6d3fb406de79fee78d52cd7f082f536bcec70e2bdb2285b4f9e9fe65a243ce9fbd3c74534b13e7ffb4b80586318f66464ca3dc48",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0dbdf25b-edc4-4119-8e10-f5ddf74bcc49"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "1536:zbaNtsWhhcdSp94GvDkBBSz8crW4dYrml+IOlnToIfI0tUE7/1t:zb0GACjSwcrVGUsNTBfIEz7/1t",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6e2cab76-605b-412c-ac64-7fa51bdfc84c"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--2d0875b8-37f8-4c74-a96c-0bab0a77af8b",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:01.000Z",
            "modified": "2021-06-19T07:16:01.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "9a5eb5d2-214f-4175-b616-807b437623fa"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3072",
                    "category": "Other",
                    "uuid": "9e2770da-f69c-4b1a-80f7-3ffe7a36c5ab"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "2.445945983115",
                    "category": "Other",
                    "uuid": "1039748f-9c20-4339-b84e-87ed3bf8aafd"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cc5f99a67d584076176fae2f3822a191",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "64219115-abd3-445c-a6f2-54ffeacfa715"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "5772e72eec839165cb29caf4b52e83fcbad5124c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "65b9d621-0ae6-4ca4-a3c0-ecae12c57f08"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "a0e0e3344e21336ba23f866bde4aa5b5d994cdc9a5db9441d1ca39a055ba49ee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f5c1d832-e7bd-4caa-97e0-03394bec9879"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "a9b1aba1d5914c051f2e8a1331e1cd68a7feccd73c90ac1f62281aa54a7c18bd1b319e3d5ca29739b77275f4a1f62d2f8db96c8a2fab31290fecce3a1cf56866",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "daccf9fd-fb93-4eae-959c-dfdc694d5235"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:gCccccq6uSkeKv6uSkeK8hBSqaZVUUey7UrAX/43KKKcmXu:gCccccqTk4TkvkhUnWAK/43KKbmXu",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "93c76331-21ce-4a2c-a27f-43d9330ab0cb"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--62f7447c-fc39-4d03-8172-ec14eaa04460",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:01.000Z",
            "modified": "2021-06-19T07:16:01.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "483b6a43-5878-4f10-a165-b5dfe4ae7139"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "19456",
                    "category": "Other",
                    "uuid": "92705f82-bc5f-4414-badd-acfa6dbae84e"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.6971722413812",
                    "category": "Other",
                    "uuid": "659d8b6d-ccfe-46c8-8a14-eec4fc641635"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "f84ee5798792da4db33195dde77b6e91",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "86f23273-10a1-42f7-987c-51964342e3be"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6b0669841917fa3b0fa6a62503d6cd3330ab9bd7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "050a977c-31b7-486f-a53f-e86cc1e23282"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "1723cc719741456e864cf779983360b269e9ca2638ab4e8b95d70f044aef02ca",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "edf4a79d-ebe1-4dc5-a8f6-53131c17942e"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "70219aafb3e592934811ed93dbb2d78c67f09bd8b2ecb99d2967a18a3b15c25c24101f50c90afa80a5b2b58794ed2a589e0349c6f6c8bee5a3297c60e23dce3a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "22ec4e14-b368-4e5e-bd59-7a107e5eaf5a"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:zLAv35Bi9RFgKcQvd0ZWA5FtuEYftV/G9astHmKiRw9LFjtbzlN803i:zAPARamd0W40ZftV/G9astH7SkBVl6Oi",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "e8682cb0-a1a1-403f-8c14-7117f83179b5"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--04314631-c3a6-48e8-bb9b-6d5bd11dabc0",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:02.000Z",
            "modified": "2021-06-19T07:16:02.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "9bef26cd-6816-4709-a67f-a8f7a0d2d766"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "7168",
                    "category": "Other",
                    "uuid": "953a4d03-108c-4510-8552-55bb4748939b"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0935798215195",
                    "category": "Other",
                    "uuid": "caf47a04-d970-4ef9-ad1e-9898030f163d"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "57118168edda6878c97381cdd163ffac",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "265f49be-7d74-457d-a040-27004fb6ea25"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "9232bb5492e5f8974534f8d2a37ba003f561d70d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "af07c6d3-5a43-481d-884a-d5305f053c0f"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "4fad497162606616d236882ae69b6408c6deb777e2a07e6d28232a612f879719",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "57744c29-9875-433f-9fbf-c708c0b311e9"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "f0f6eeade6d50faf9436e6c05b67eb53bb2db64349678761a8ed9d5135a7860ddeb6990f3440946aea5658fcb81bbd5ec225d4d8d0d2e5c511290bd5110eaeaa",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "09ca3df6-8d55-4cba-811a-caac946696a8"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:CvjcT6wXINa9M34/L6/sG/gj2v8NIAY3LgCp39myXOfQVvn8h8m:C06wXINaG3GO/p/gqEQ3UCp3syXOYWX",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "628182b9-3d6c-4aa7-b1d8-4e805869b267"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--70c9a0a2-55e7-4801-a1eb-38428b7753d0",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:02.000Z",
            "modified": "2021-06-19T07:16:02.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "bd2342ca-082e-4933-8273-8d8d6c639b07"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "74c89eaf-ba9c-4dc3-9205-083c45e7a7f0"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.8235535794019",
                    "category": "Other",
                    "uuid": "598d0a44-8978-4727-a00c-d4b65d34ef2d"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "b71e24a232cbf15c55c58f0bbe722b68",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "860e0f06-a82a-4aa0-94a1-31e021ea714d"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "5147860b708a336da3f27920a1b729390dc93e06",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "01013ce6-9dbc-4521-bd0c-a8bf3ac95864"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "9dd20c4ff51c2ea26bc0acb7f8d64de68957b31616dad2ae6225eb204ebbd934",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "8cb12f07-a471-4b8a-9d95-675163bcb54e"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "8be573ee5247c2167275697fe355042439ac78dac64b228e095d60092ca3e46fc13e094b48d6dd533b8451b819f5b10567b07994f4624ba35e67e46d1686bbd9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "77f32174-8ff5-4924-ac8c-9028941870ac"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:ChoqgiPO4TCO18D8aUqSt9RwkrXkr99dIAMnF9AIaPPTW:6o9iPf/uSpzo99KI7HS",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "59d19c93-976c-4352-8899-3b03f64abe94"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--d7b4fe9a-b4f7-47fc-980f-a832d5436af0",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:03.000Z",
            "modified": "2021-06-19T07:16:03.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "35ff0bfd-b6c1-487b-87ab-b142b77e177d"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "26624",
                    "category": "Other",
                    "uuid": "3642f81f-06c9-412a-bf2d-c6fedbb58c04"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "6.3151171440822",
                    "category": "Other",
                    "uuid": "6fe58e3a-bc98-448b-bc10-afe2c20ee24f"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "cf0b16eca2aedff96b586a2add8e956e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0bc9fd2a-3c11-4eaf-bd9c-fe2d3665cc9c"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "6b3099c00646a54d25d96c0d9a3394463394083d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0413784f-b90a-47b6-8d3f-4fd23a0bca57"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "e64daa8926bfab138ddbe16a1f84ff4dd67984b06d0d908fecab21f051e7786a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a5cff96d-ce55-4499-a2ea-8c0d090d6baa"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "f408833fd42da728bd7f89f4e288a4fbe1651cff3a26fa911cd09f845302d678c70037ceb36b3d58dba910d1b93ec602fa0f9ac13ae63936c4332d4c0f89c049",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4b927828-da7c-49dd-bb6b-311b1fe61648"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "384:T7ptyfdBgZqCq6pWKksgl2IYdSuC2WigRelS1K8C1x2i7JxhsmuH40m+wMe3ifsY:T1ZqCQKy8IYdfWiUelR36ihR6nmRYsY",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "445c7bba-45df-4a35-86d1-83133ede8de8"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--1567f95b-65c3-4730-bc4d-93bc73d5892d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:03.000Z",
            "modified": "2021-06-19T07:16:03.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".rdata",
                    "category": "Other",
                    "uuid": "f92dbb37-647a-4047-ad4b-6c22939029ab"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "4096",
                    "category": "Other",
                    "uuid": "8ae0a71a-1e36-43f3-826a-d3f6caaac33a"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.5671717525546",
                    "category": "Other",
                    "uuid": "801b8b84-340f-4ab1-b98c-eac2cabd3a97"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "aff5b1cfc5506fa3a5d8804efc11d698",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "49b3ee44-c48b-46a3-97fc-fce1d414e4db"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "c46d865af7939046f409156a9f50cacf86a70d94",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ad4c5607-06e3-4ea1-9f94-c9a460d18f3a"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "822da4186064486ce61c2d4f9840ecc9e962c0317e8faa62460944118a439eee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a541e783-1fc5-4f3d-9d55-6d1117252c33"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "4ed646b46f415c4d9eb9f15e19be64e8924fa9db941bdfaf5d4452319b099c212145a1c9e211560d03780644070c0c04afe425dac13d037f62d0a2a9c5bcaf14",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "10ca781e-74f0-4434-a1ee-25a6c6115897"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:rwcdILFDTZ8qNEFw6QNOyjKsBAXpQXQcPhhpHP52VosLHMEiLnRVsxO3YU4dTh+s:r4CxefzfZR2SsaROOrOBEM",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "abc211f9-0943-4f64-9f62-c695b28e3568"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--020e7d50-df08-4474-ae41-7f5120f0e7de",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:03.000Z",
            "modified": "2021-06-19T07:16:03.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "102ce2a1-79f2-459e-aca8-4c282221ef29"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "10752",
                    "category": "Other",
                    "uuid": "034b4f4d-1c2f-4ef5-b46c-0224e98a009e"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "0.6671648510441",
                    "category": "Other",
                    "uuid": "c2ccf7a2-99fa-4a6a-9376-845d8e975940"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "4c60b1abdf10c563cf887337d224e16e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4157a669-45a3-4ff0-9d46-ca91d3d1fbb5"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "1672fe96a78d97957a10d762a4e4be151feaf820",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "fb820d47-8390-4cc7-aaae-1359a2cc1f2d"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "5c0948fdd61baf6a4dbf6dc1b8d2980edcbe81ab47a203e73358432c99607d0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6c6616a7-b663-4b81-902e-f82e439a0601"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "1bc13c7564fc100b3bcb7e0b269d0a0b089810247cafb43800987c0ff4438748f335bb1e6bb5d9e33644c490ddeaae7f3066f55ffb3c3a8eb0de09eed93e9613",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "523f0b32-18f6-42b5-93e1-24a537c2568d"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:W5fI5K9PJtoa+0SC8gTMCkzVk1yu6wnffu6wnfX6/1nS:MmK9PJto8SbgQW196w+6wP6/9S",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "40728d43-984c-4d5b-b2ec-c0773f108031"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--5762f80a-2219-4fa7-b847-5d16c739f152",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:04.000Z",
            "modified": "2021-06-19T07:16:04.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".pdata",
                    "category": "Other",
                    "uuid": "0d892f5c-3c0e-4399-a5c2-d7b3503389d4"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "65b7cda8-b0db-47a1-affa-254b69e646e3"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.4171417196239",
                    "category": "Other",
                    "uuid": "db55d821-dada-4280-9e24-989010f0260b"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "af11065588ff1be5e27be4cd684508b9",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1b7df6b3-f97f-4cbf-8c66-9c46d8899c80"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "5aca630b4b10132b3933a7919d630b37a2d77e4a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "243ad98c-05b4-43e8-b451-7c35a5a1987e"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "20b45bf068739ca996e0b62119b8f06045946193bd1fee9e963eab141b90865d",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "4b82b047-9d72-4db1-bc79-89f4db20d541"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "67c859d7e9cc3a0a0dafffdec1e2cc1a3950c32a9655d38520b9670df9a213bf29ce2c00c2e50e3fa24f999cc45c3dc748ca75121244a95a41a8bc447e38d8e0",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b06ed357-6a1b-4a15-9d71-e6ed85b8571f"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "24:rLIjwvEE2vBxBtsyzw1o9/PlmOOKbcyIp341BqCLoosPTLiZeS7:PcwCBxfzw12FmGbc+CHlLi77",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "eb702ec8-13ba-4bff-acf5-15b6a1bd8283"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--3573f36a-2d32-42d2-bf5f-2d91a580510e",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:04.000Z",
            "modified": "2021-06-19T07:16:04.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "INIT",
                    "category": "Other",
                    "uuid": "2f9191ac-ca9f-4745-8400-6399dafe9998"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "3584",
                    "category": "Other",
                    "uuid": "c4bd0a97-188c-4e49-8257-180560e20684"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.1718697425243",
                    "category": "Other",
                    "uuid": "44bbedb1-ed0e-4ac2-bf97-979da77bd8fa"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "bf3aaff8a4f25625c50651a235f234ea",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d6922e1d-c35a-44f2-b47f-4ca6f963cdc2"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "efa19aba8be359ef3d1671eea2533d40a8ad3574",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "af6d4c7c-bc6a-4d1b-866d-92163ffb3a44"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "0df32b5ab983d4f13d1f4d350e1a92f66e41350711886943720894025588ea7a",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "0e74e8ac-63d6-4521-96ea-1ce8dd2a9af5"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "b3d5d87dfff44bc6cbf37f4f514c223bff7229ac93342c2754effb6d6b5a91fd01939160e5ef37c5edb66ae94670b7ef9387004102d1aa6aa128a32bd7f31bee",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "12cdad28-1e42-43e3-bee7-6a38637c489b"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:qjHwcdILFDTZ8qNeDYDOjNe7kBtWt2BpRbD+KCm7MuINTg3nuO4EgdW/lLWfe:qjH4ChDY6A2BXbD1XN2EgdW/lLW2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "cfa7891d-cc95-4bf3-bc9e-03c097a238c7"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--eee305b5-1d33-4751-8438-e4e425dce7cd",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:04.000Z",
            "modified": "2021-06-19T07:16:04.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".reloc",
                    "category": "Other",
                    "uuid": "d91e4256-f293-4c45-a630-518b5d6c4b9d"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "b8628b7f-67c5-4fd9-9a7d-aabff5c9ddbe"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "3.6204816846131",
                    "category": "Other",
                    "uuid": "244a9eb2-2db8-45a3-af55-4656ed8cb6f2"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "fcb8a85ae2d11c0aefad6b5535e1bc90",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "baf359d5-ce30-40c2-8fb4-e1fca5914020"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "12c935664a10eea034a86053d7dad2c872d582e7",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "ef2bf816-5eac-4098-8226-9ad372724aa6"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "199727264dad79db742e501ee665c0adb8a5e08f70158dd23a8780663e330e0e",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6e26172f-5fac-4fa4-8740-b66db865c103"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "aa6cd28eb6eb70ef70229126734a359aed53a505608162ee9462c5bbdc9790e4c35336c52f39941988c3f7c9ee8b4c1d53c9e44b241bf2dd75cb827a61777419",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f5de927d-5aa4-482d-8a67-b37ce7365540"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:X96q9llvt1CtC4/:0+6tC4/",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "18e0a65a-c0f6-4dd8-b4fe-6536d2e34ba0"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--81b3754b-947e-4508-abe9-c9485907355d",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:05.000Z",
            "modified": "2021-06-19T07:16:05.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "UPX0",
                    "category": "Other",
                    "uuid": "92a9ebf2-7c9b-4f87-87ff-dbece271679e"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "0",
                    "category": "Other",
                    "uuid": "85967f2a-4219-40cb-899e-68f79ff4c6d9"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--5ac0e594-a97e-459e-822e-a5817e4a7164",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:05.000Z",
            "modified": "2021-06-19T07:16:05.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "UPX1",
                    "category": "Other",
                    "uuid": "3508ff9a-f36d-44d2-8e2f-9243711341b6"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "5120",
                    "category": "Other",
                    "uuid": "3807a3c3-f83b-4c5f-939c-730b8773963d"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "7.508942901406",
                    "category": "Other",
                    "uuid": "43e0f8f6-1d39-4cf6-bd3c-06c4bedd0196"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "ccae6ab3ef57e1a2745c58bf1c5ff494",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f3d605e7-f655-4ba1-af73-d21385b85ef0"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "3a19ec072786bf350b7561e638bc15b44c095d16",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "09cfac7d-eefc-4d4e-8756-c1879f78fede"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "29141ae55c5d686794d357ff09dc8270f1e734652a561f37cefaebedb283bae1",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "89a01a0e-7ad0-4862-bac7-71adab6152b9"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "69550da8fd01abbd719506505797aca6fdf587c4d1b54d864004b4cab1fd436013c8c5358c9075f063e6a77b3e04c4e5f15064e37e5fe6e56eeed57d73f9d24c",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "a2c119f8-a106-4be7-a74d-ec003a7cc9ed"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:9nXD23Cm0IShlUrCWHVwsMMej2TQu20p05ZPUcNVG7lEqhZRi2wot6xMvazl:9j3IOUBVIuQue567lvhZTHtdcl",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "1bd6f798-d184-465a-9f04-c233418b43b1"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--4a858930-96b7-495e-9d9c-70ead6e7652c",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:05.000Z",
            "modified": "2021-06-19T07:16:05.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": "UPX2",
                    "category": "Other",
                    "uuid": "60a9921d-e030-43c3-a5a0-d63d46c1439f"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "512",
                    "category": "Other",
                    "uuid": "496ca0ab-96a6-4f8b-a2c0-7f8a09c3dacc"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "2.0018429810303",
                    "category": "Other",
                    "uuid": "e2aee878-48c1-419c-9357-2c9a154eb8f3"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "6788768dca66f72f50487409a60d2178",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "7f4fc03b-82f1-4cdf-afb4-26ce260bd373"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "f52833e57211e02f15c0ffdbf9b5212fc5e5eebd",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "843a08fa-61b0-44ad-b2cf-9a1bf0a94837"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "6e2d461d20a0b424272beb9d17ae5687b46fea1dbee2b398b5ec0ab6c52097f2",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6b47c0a8-a576-4f9b-bd41-cee87554b0a3"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "d22b7cc251b2527ae69e3fe0ec47b9d637d8390c766abdd2bd7f69cf436c6e5c912dcde530df218bbf01447cfca89fa00880fade34d91af356da37d6d13d24e5",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b1e6662e-e10e-4232-8beb-b8ac8d34253c"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "3:clf/llVLNjX//Jrs+ctpKklDIth6lizJ1SgzJkJCRJjdlgKaXRRAAHhHt:cHrklGSedloBRAQ",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3b5725c5-638c-4f60-a97b-4987fa39c790"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--ac495c0b-7c85-42b5-af1c-5448b40f5987",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:06.000Z",
            "modified": "2021-06-19T07:16:06.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".text",
                    "category": "Other",
                    "uuid": "3bccc07c-d37e-40b9-ad88-dbdbeb205f66"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "6144",
                    "category": "Other",
                    "uuid": "804ca645-4510-4127-b7e0-7e34e4adfe74"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "5.0346994054755",
                    "category": "Other",
                    "uuid": "0b9b4cd0-a80c-438c-bae7-bf6e5653e557"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "72a513a5d0b5ad70b8090fbc35439458",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "9d0385b2-9233-4179-aee1-520aac07b53c"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "b18105716636ecd4d852101654fb5c50cf5fb735",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "d38528ae-c086-4f13-a8f0-6ecb5f603eac"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "7f0a3160ecafe114e4ceaf85c001f46297c7dc055541e59f67581b33ef22d726",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "f7a69422-d7e0-42bd-a58e-e26fecb525dd"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "2ca362483345160413a5ec08bf5a94855c392609c97736f954c1b244583a6fb68d59dbe88314afc6c19828d7409e1862dc5648c5fe152d783eb23f06d5d5a715",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "49e38680-fa2d-419a-94d5-b919b77b1616"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "96:IzBcvteJ3ca9M34/L6/sGfQmVpt8AC3L3a/39jQUoLD+rHeUzDBI:IKteJ3caG3GO/pfQmHO3Ti3pHeUzDBI",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "adc48678-70db-4b98-9961-ff108afd3559"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "x-misp-object",
            "spec_version": "2.1",
            "id": "x-misp-object--df11c33f-30d2-4c05-b727-bd223e59296e",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2021-06-19T07:16:06.000Z",
            "modified": "2021-06-19T07:16:06.000Z",
            "labels": [
                "misp:name=\"pe-section\"",
                "misp:meta-category=\"file\""
            ],
            "x_misp_attributes": [
                {
                    "type": "text",
                    "object_relation": "name",
                    "value": ".data",
                    "category": "Other",
                    "uuid": "ae73765c-490b-48f8-95e3-63baaa3c8ad3"
                },
                {
                    "type": "size-in-bytes",
                    "object_relation": "size-in-bytes",
                    "value": "2048",
                    "category": "Other",
                    "uuid": "9643e6e8-2963-481c-8676-92eea01c5704"
                },
                {
                    "type": "float",
                    "object_relation": "entropy",
                    "value": "4.9702676948355",
                    "category": "Other",
                    "uuid": "a8068e29-dde3-4c44-875a-00869748f4e2"
                },
                {
                    "type": "md5",
                    "object_relation": "md5",
                    "value": "220bb86509378eb738d76536fd661248",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "838b75ed-6959-4109-b49b-716dacbe6e18"
                },
                {
                    "type": "sha1",
                    "object_relation": "sha1",
                    "value": "0c8558886dc869749a141417d6af55ce6543a712",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "6ea699d0-9014-4dd4-90ca-bb0da4349c48"
                },
                {
                    "type": "sha256",
                    "object_relation": "sha256",
                    "value": "8ae6d4330775fb1ca101f8520871f54a0ceded00e6440c08aea069a62b7f4efc",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "3cca435a-ff8b-45bd-bfd0-67f65bdefc3c"
                },
                {
                    "type": "sha512",
                    "object_relation": "sha512",
                    "value": "7a8c0a3b8f3bd12501033d844f1c14d65ffc1a9434bfa32562784f9717f50a27206b56a1fc77c31b1c98bbac341dc992eb171e3e8e9ef790608627bb84e83078",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "b8611e3f-10c6-4f72-8547-6112cf367993"
                },
                {
                    "type": "ssdeep",
                    "object_relation": "ssdeep",
                    "value": "48:ChoqgOKvPO4TCO121qgugj9dIAM/47RKW:6o9FvPf/4v9K4RV",
                    "category": "Payload delivery",
                    "to_ids": true,
                    "uuid": "901ce007-1537-447f-888a-96c18e3755e5"
                }
            ],
            "x_misp_meta_category": "file",
            "x_misp_name": "pe-section"
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}