13468 lines
875 KiB
JSON
13468 lines
875 KiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--55d421e6-59ac-49fa-bb33-44cc950d210b",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:07.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:07.000Z",
|
||
|
|
"name": "CthulhuSPRL.be",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--55d421e6-59ac-49fa-bb33-44cc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:07.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:07.000Z",
|
||
|
|
"name": "OSINT New Hacking Team IOC\u00e2\u20ac\u2122s Released by Rook security",
|
||
|
|
"published": "2015-08-19T11:27:36Z",
|
||
|
|
"object_refs": [
|
||
|
|
"observed-data--55d42215-4988-43e2-8a99-46ba950d210b",
|
||
|
|
"url--55d42215-4988-43e2-8a99-46ba950d210b",
|
||
|
|
"observed-data--55d42215-fb80-47f1-b490-427e950d210b",
|
||
|
|
"url--55d42215-fb80-47f1-b490-427e950d210b",
|
||
|
|
"observed-data--55d42215-d6e0-4a93-ba35-464b950d210b",
|
||
|
|
"url--55d42215-d6e0-4a93-ba35-464b950d210b",
|
||
|
|
"observed-data--55d42215-99fc-4fab-b3c4-4ab2950d210b",
|
||
|
|
"url--55d42215-99fc-4fab-b3c4-4ab2950d210b",
|
||
|
|
"x-misp-attribute--55d42226-1a70-4e99-9d89-422b950d210b",
|
||
|
|
"observed-data--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"file--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"artifact--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"observed-data--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"file--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"artifact--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"indicator--7601241b-c480-4eca-a333-a86930f488fb",
|
||
|
|
"indicator--771f6859-8317-4c89-b891-e83c3a3d64cb",
|
||
|
|
"indicator--af304c0b-b8b2-4c23-a1a3-f56c997db033",
|
||
|
|
"indicator--26df82cd-660d-4d29-995b-2ded2d8ed0ca",
|
||
|
|
"indicator--f972109c-f5c6-460f-b802-b9f31303c5d8",
|
||
|
|
"indicator--69d16485-a76d-446b-8064-4a59d5987ded",
|
||
|
|
"indicator--795350eb-3004-45b5-a357-6a66454ee863",
|
||
|
|
"indicator--dd9f0078-98ea-4801-ba4d-c82dff90581e",
|
||
|
|
"indicator--6a2c8964-043e-42f0-8e6d-c3656139ebe7",
|
||
|
|
"indicator--bf559b91-bc9a-4af2-8bcd-8dbbbf77870a",
|
||
|
|
"indicator--098a82af-02a6-47ab-a27e-6e13da4b9008",
|
||
|
|
"indicator--c5b529a2-03b7-4b8d-990e-dc574bca89a7",
|
||
|
|
"indicator--f0df95c2-b23c-4469-85ae-bad7efd0639f",
|
||
|
|
"indicator--0dfc6973-f521-4633-b7dc-772002d7d934",
|
||
|
|
"indicator--f89d2a80-f560-4674-9992-c602515bdd5b",
|
||
|
|
"indicator--236c8501-a729-42fe-8832-a98746e486fc",
|
||
|
|
"indicator--23b15940-0ea9-4d20-a6d0-8bb0f7cc879a",
|
||
|
|
"indicator--89881e94-cf69-4b56-bcb3-f0daed873beb",
|
||
|
|
"indicator--a32811e4-2da3-41f8-a8a0-f4e8520e2714",
|
||
|
|
"indicator--8e9fc219-838b-4365-a362-6d2509702407",
|
||
|
|
"indicator--006bce3c-3090-4523-801c-301624e21edb",
|
||
|
|
"indicator--9913b313-a2bd-41ac-ac22-462b4cb95b1a",
|
||
|
|
"indicator--e0027e4d-fc48-4107-8afa-6a01252c7966",
|
||
|
|
"indicator--c83eacf8-d705-4af2-b5bb-e92f11966a03",
|
||
|
|
"indicator--9d67cf49-1f1f-42d3-b2a2-5c314d8fe907",
|
||
|
|
"indicator--b9a6cbda-853e-4cbf-a308-2d4d2da7a0c7",
|
||
|
|
"indicator--840e5e80-4bb1-447c-a299-ea6ed86c510d",
|
||
|
|
"indicator--10920f03-9f4d-40c3-b152-70defe2aa72f",
|
||
|
|
"indicator--597c5c12-44ce-4abe-ada8-47b221f40f02",
|
||
|
|
"indicator--0aa21b78-d0bb-4a4e-aca1-50458a43dfc7",
|
||
|
|
"indicator--e205621d-5ed6-4232-9e1a-e5d9860c7648",
|
||
|
|
"indicator--f7fec521-30bc-4514-8511-2c666e0638a8",
|
||
|
|
"indicator--86143338-401d-4cc2-9f02-f31c2edfbe25",
|
||
|
|
"indicator--c5d5235f-b305-4bd0-9561-fbb16dd90a52",
|
||
|
|
"indicator--ec3b4c30-4e89-4c9a-9a64-30f9f5f3c1c6",
|
||
|
|
"indicator--84a47f78-7624-4880-b833-4b7bf7c2a25f",
|
||
|
|
"indicator--cdea6843-a984-4c2b-9fe3-3e8374bbf7d6",
|
||
|
|
"indicator--ef818f7c-f61a-4fdb-b06d-b184b77071ec",
|
||
|
|
"indicator--c1b5aa39-e237-4904-ab2f-e5b03681ff54",
|
||
|
|
"indicator--6b8f66e9-b151-44f8-81f3-917c9f110f43",
|
||
|
|
"indicator--7065b16b-cbbf-4c45-9b0b-ffad3e157009",
|
||
|
|
"indicator--c277854e-08d7-41f3-a891-60b14b86af68",
|
||
|
|
"indicator--01f59ad6-b718-4561-a9ce-bb7a6a926036",
|
||
|
|
"indicator--0a26d6c9-1cb7-45ff-ade8-ab0066f67a01",
|
||
|
|
"indicator--718297c5-45c2-400a-83e9-19620c79a4f3",
|
||
|
|
"indicator--291a75ca-0cdf-4fbd-86f9-b5882bcd868b",
|
||
|
|
"indicator--59fda003-3d7f-485e-9f18-827d29695be9",
|
||
|
|
"indicator--3edbc8e5-1c44-4b29-81b2-3030ebc925c1",
|
||
|
|
"indicator--7eeaf59b-a707-4100-aebb-de8dbb07d1cc",
|
||
|
|
"indicator--be798f89-a14b-4393-8053-3e5b0aa9851c",
|
||
|
|
"indicator--b49dde61-87ba-4c9f-8845-617205a505d8",
|
||
|
|
"indicator--ceec65fc-d2bb-4d56-af56-35e156870175",
|
||
|
|
"indicator--6347c961-dedd-4236-966e-caa4393f043d",
|
||
|
|
"indicator--8b636cba-02e5-4dca-8c50-1e9bc8b901e6",
|
||
|
|
"indicator--43b677fc-f907-44e4-bcf1-93f037f8bee6",
|
||
|
|
"indicator--3e82c2af-9d58-4286-8cce-643393fa73cc",
|
||
|
|
"indicator--512668ee-1f2e-4723-8600-3b59105f2442",
|
||
|
|
"indicator--f166699a-e927-47fa-8781-54fbf9622f30",
|
||
|
|
"indicator--3cde91e6-0a73-4089-a6b4-2767d0a0472b",
|
||
|
|
"indicator--f8e36e99-f0be-4a1c-8fc0-f8b4c194a49a",
|
||
|
|
"indicator--d093acf3-156d-4faa-95fb-6d4368b470f5",
|
||
|
|
"indicator--7b5a0b53-f7b7-4cf7-ac47-bf0b13232053",
|
||
|
|
"indicator--d1a8b930-1e18-4f60-b907-ccaceb3e26b3",
|
||
|
|
"indicator--b47eb83f-f9cc-4fda-84bb-1dfa5d89ca90",
|
||
|
|
"indicator--bb45dd8e-a90f-4dad-93d7-116c52d89682",
|
||
|
|
"indicator--9b57917a-2ec0-44d4-8f23-4daa0ac81f92",
|
||
|
|
"indicator--46bd539a-ccec-4613-9990-a069abba3176",
|
||
|
|
"indicator--a1076a32-e1eb-4002-8e5c-f052266942b3",
|
||
|
|
"indicator--3485a752-cc38-4166-b7c4-710cabeabf91",
|
||
|
|
"indicator--c4fe772d-9073-4105-8272-e9ed13037d33",
|
||
|
|
"indicator--665989aa-829f-4841-a4c1-604147b96a1e",
|
||
|
|
"indicator--4b7f6f74-df42-4651-9d35-4d466eeb5c69",
|
||
|
|
"indicator--53602b38-26fa-4c3a-803f-7db5685eed47",
|
||
|
|
"indicator--0260f819-1896-4d9a-914a-d3d78f6e6de2",
|
||
|
|
"indicator--7245d375-d893-4850-8744-b03091aa856c",
|
||
|
|
"indicator--83202bc0-1ac7-4b86-966f-8ec8c34068d1",
|
||
|
|
"indicator--31e3b9c9-b00d-4102-960f-8c1627c21228",
|
||
|
|
"indicator--fa30174d-49c8-4505-be5a-dc9021879d6d",
|
||
|
|
"indicator--5a5b718c-6606-4622-aa32-b9c695edbc9a",
|
||
|
|
"indicator--bab4e30c-de22-4673-85f9-020810244ffb",
|
||
|
|
"indicator--ff0db605-f6c8-4ea5-8af0-01c7809ce691",
|
||
|
|
"indicator--dc6d06ca-b12f-4ce8-8dc5-d76763647537",
|
||
|
|
"indicator--35d2a39b-cba7-4013-b9b8-bfae680f5229",
|
||
|
|
"indicator--78a4c9af-855d-43f7-923e-0a1ce42a71e1",
|
||
|
|
"indicator--d868bb65-e7fd-4f8e-af23-0812b8d9fe15",
|
||
|
|
"indicator--a80e7721-9833-495e-87cd-19ac00c04a63",
|
||
|
|
"indicator--7d98b78c-8395-4f11-adba-02afdb5207b1",
|
||
|
|
"indicator--28d58963-6b22-4d87-b678-ae998ef81fdf",
|
||
|
|
"indicator--4da36cd6-a0dc-4860-8712-7e88ed00b082",
|
||
|
|
"indicator--91918a45-f0e8-406e-8549-0e72f100ead1",
|
||
|
|
"indicator--f90216db-6618-43f0-a326-71470e3dd2e8",
|
||
|
|
"indicator--8bf60c35-93dd-4732-852a-9ae3e21b6b30",
|
||
|
|
"indicator--e96a8c91-c7c0-4656-97af-420e90e371c5",
|
||
|
|
"indicator--a4e99c4c-d1d0-495f-9fde-52ccba5b732a",
|
||
|
|
"indicator--ecfa754c-1555-4635-bbbe-eeec31d4c85f",
|
||
|
|
"indicator--ebf80a27-1336-409a-ae54-9117f055f060",
|
||
|
|
"indicator--06b8c67b-24e4-4142-951d-21b2a89fa86a",
|
||
|
|
"indicator--f450973c-6d4d-4c49-8521-fbdec8dc346b",
|
||
|
|
"indicator--390d185b-ab0e-4f84-8911-45cf12db07d3",
|
||
|
|
"indicator--0ab4b3d2-fc28-4764-af3b-ef052cbc4fe3",
|
||
|
|
"indicator--af4615ae-dfc2-40fe-bd5d-4c65b31d2ec9",
|
||
|
|
"indicator--7b57726e-ca44-48e0-885f-726dca3efc0c",
|
||
|
|
"indicator--258109cb-e210-4eaa-bb41-cf3360e2cb87",
|
||
|
|
"indicator--80b79234-7080-4854-95c6-801dcf366669",
|
||
|
|
"indicator--2b117b14-fc71-4aa0-9251-53e7b78065be",
|
||
|
|
"indicator--0e8910a2-3e0d-4c8c-8e87-4c1a054778ef",
|
||
|
|
"indicator--6e8a84e5-a8ed-4bbe-8432-277f3ef429f2",
|
||
|
|
"indicator--850de0b3-451c-4dbe-b182-7283d3e1ae14",
|
||
|
|
"indicator--873a1fb7-3b17-4862-a14e-28102e88e8dc",
|
||
|
|
"indicator--02dd2ca8-c8aa-4e83-927a-383ce585c8d0",
|
||
|
|
"indicator--f3436230-788a-4465-af99-e6bcc636baa7",
|
||
|
|
"indicator--22672ef2-0ba7-40f3-81fe-de1d1f4f5b32",
|
||
|
|
"indicator--23c842b8-0461-4224-b2af-f74d938b0fd6",
|
||
|
|
"indicator--ded42c00-ecb8-4965-886d-35dc53929368",
|
||
|
|
"indicator--e6a3d55e-b8b3-4534-9a0d-fc7fb68da030",
|
||
|
|
"indicator--eb1ebfe9-7074-40a7-945c-83f919d5506f",
|
||
|
|
"indicator--9b836723-67ca-4581-b478-d734242cc51e",
|
||
|
|
"indicator--3ea980d7-ee2c-4b57-a9ed-aaf7bfc89fcf",
|
||
|
|
"indicator--9ea91f3e-5220-42be-afdb-39bf9e5b36d4",
|
||
|
|
"indicator--725a55f7-ad2b-4e09-9fcd-22cd1996e853",
|
||
|
|
"indicator--b406ff15-2a9a-486c-b75f-5bf616105a9c",
|
||
|
|
"indicator--6ca02587-ff2f-4ba3-9137-6922dd599670",
|
||
|
|
"indicator--2ce6f4eb-497f-4d51-ac28-a537b47b3457",
|
||
|
|
"indicator--980e1094-76e5-4c42-9311-0371e7526afd",
|
||
|
|
"indicator--97b17dfb-de9c-426c-becc-994135ca78a1",
|
||
|
|
"indicator--43536876-d663-4d3a-b1c5-701e40ccf990",
|
||
|
|
"indicator--ff3e872a-68f9-433b-a15a-1a7c66b685a4",
|
||
|
|
"indicator--3b6f165e-0e84-4ffc-9d03-49ce070eb30a",
|
||
|
|
"indicator--b91cd547-410b-4d31-8023-527b013b09dd",
|
||
|
|
"indicator--ec0267c9-f006-4a59-9b1e-1b1295f0c342",
|
||
|
|
"indicator--0f96c3b9-8a03-4fab-ac7d-2a1c42b725fa",
|
||
|
|
"indicator--c554f2d9-2859-4bd1-861c-4f7a52201039",
|
||
|
|
"indicator--a02c0c42-bfce-4541-8397-0d9d24281fa8",
|
||
|
|
"indicator--7d0ccae2-f14c-483c-a434-6d2dc875c139",
|
||
|
|
"indicator--0a4d8a72-e1d3-4a23-bc97-a6fddd06c20d",
|
||
|
|
"indicator--49c8dec2-a185-48b7-91b7-971770db6a95",
|
||
|
|
"indicator--545bc456-c07a-4c45-ad85-3275a08f1547",
|
||
|
|
"indicator--22a91e1e-5340-4b0f-9d67-e62bad6ad00b",
|
||
|
|
"indicator--c756e427-3ec7-4707-a5b2-e99dbeae7407",
|
||
|
|
"indicator--6882846b-f6b5-44f5-ae65-12eb49e9560d",
|
||
|
|
"indicator--5a6fc593-9f0f-4eb8-9e65-d868ea81ba7f",
|
||
|
|
"indicator--ee1bef45-ffdf-4746-8c0d-cf27f31a415c",
|
||
|
|
"indicator--ddadf0c0-363c-4c6a-8128-6541823edd65",
|
||
|
|
"indicator--37a7a581-0fe7-4c7c-a800-4c8faa7c0df2",
|
||
|
|
"indicator--20dc4a5d-3a4c-40ff-9d4a-7919215c2935",
|
||
|
|
"indicator--c0325e48-8cb8-4ea3-97a9-e9723850fded",
|
||
|
|
"indicator--54f94f92-86bf-458d-9ac4-bc942109cf79",
|
||
|
|
"indicator--75063b23-14e9-4548-aaab-e458eeda9fab",
|
||
|
|
"indicator--11eee180-19ef-479b-b36b-d0b3056077a7",
|
||
|
|
"indicator--88b177a9-c24c-41a7-89ec-fbbb6839e280",
|
||
|
|
"indicator--541a9bf4-71f9-4d76-86ae-677074d8979d",
|
||
|
|
"indicator--8101bb7f-248d-4215-a10e-49f228c1eeda",
|
||
|
|
"indicator--1676458b-9529-4b79-8c98-7c80c5022fd3",
|
||
|
|
"indicator--b68e19b3-41e5-4082-8dcf-4496d520254e",
|
||
|
|
"indicator--2fda61fb-7480-4dc6-ac15-e3987824c712",
|
||
|
|
"indicator--2f5697dd-7d4c-4add-9464-0a8722431e69",
|
||
|
|
"indicator--a606b7bf-74f8-4cc1-b6dc-a1e1ee031c4b",
|
||
|
|
"indicator--8db2d58d-85ee-4ee9-8d28-b9c36a4b27e9",
|
||
|
|
"indicator--eefbd850-7a1c-4980-bbd3-fa4c0ecb1c35",
|
||
|
|
"indicator--8fe28aed-1a08-4204-aaaf-11c6855d6ec2",
|
||
|
|
"indicator--767fb9f0-8287-494d-a18b-90e9a0c64b46",
|
||
|
|
"indicator--c24f896c-0378-487f-8f2a-fce16ca8609f",
|
||
|
|
"indicator--2c35886b-8369-4ddd-b8c3-f3315e1091d3",
|
||
|
|
"indicator--cd087eb1-d439-40ed-9c14-cc05a4577848",
|
||
|
|
"indicator--5a0f0b21-42ef-49e5-b0f8-cf08d87b5086",
|
||
|
|
"indicator--1f30ddbd-3237-4f95-9b33-9c5293ae2445",
|
||
|
|
"indicator--cf46d973-4419-4a51-a9cc-8f7bb5861eec",
|
||
|
|
"indicator--242ac95c-2680-4b78-ab78-adc80bff3e7c",
|
||
|
|
"indicator--ef7632b3-d2c3-45a3-a62b-f5698022a2d3",
|
||
|
|
"indicator--e4ff7f23-f636-4b8e-a0c7-b553ee18282e",
|
||
|
|
"indicator--bb0914a7-a673-401d-bbdb-9107cd246612",
|
||
|
|
"indicator--f4d8cf52-94d0-49fd-bccf-43045aae1902",
|
||
|
|
"indicator--a352b1df-b573-48b0-b2b9-e3d9c4f5a6c5",
|
||
|
|
"indicator--3f0d6930-f60f-473a-8cbd-2a289b3ef272",
|
||
|
|
"indicator--2126fea7-6213-4628-97ef-9824ea265e3c",
|
||
|
|
"indicator--5b3a202d-d5e5-4c05-8b2c-c4442f9dd7c5",
|
||
|
|
"indicator--2b8bd650-eec5-463c-8a48-ea33d0e43daf",
|
||
|
|
"indicator--80ed6c96-bbec-4473-80cc-dfba41823ebe",
|
||
|
|
"indicator--339ea39a-4756-441b-9dae-9781a00bab7d",
|
||
|
|
"indicator--e1d3abab-9d6a-454e-9410-4a6e4d855f7d",
|
||
|
|
"indicator--d069b040-c0bc-47c6-8fbc-a7432cc196d4",
|
||
|
|
"indicator--d28c13ff-7f19-48cc-9da4-e35aee86d550",
|
||
|
|
"indicator--172da7e5-d8d4-4a68-866f-ae7d241e7657",
|
||
|
|
"indicator--e8d23658-73d1-47ef-adaa-e884dd9147f9",
|
||
|
|
"indicator--c63737de-83db-4424-8789-78a104dd4a1b",
|
||
|
|
"indicator--30329c6f-1424-4ed8-bf91-c3e2998c1195",
|
||
|
|
"indicator--8bb19b2b-a2aa-4955-a5bd-4d402a82f101",
|
||
|
|
"indicator--f214f6e7-1ed6-4f33-9b2a-c2f9fde861e3",
|
||
|
|
"indicator--e04fa231-cac6-4034-8706-e9d286a5da93",
|
||
|
|
"indicator--5ce6d703-95f2-4b30-ba7a-c24c9875ef72",
|
||
|
|
"indicator--17ffc0f9-13a3-4411-bcb5-4892ddcaf1ad",
|
||
|
|
"indicator--7fd6764e-8cd4-474a-8948-d4e12c533b7c",
|
||
|
|
"indicator--e30890a0-fe5f-4fab-8d7e-e57ce7514bf7",
|
||
|
|
"indicator--3364987d-71d0-4930-91fa-7ec7f7fd58ae",
|
||
|
|
"indicator--6df8601c-57b3-4abb-9acc-75e710a6ad5a",
|
||
|
|
"indicator--ef02a81b-707c-499d-9485-15252ea7efcf",
|
||
|
|
"indicator--bc696816-5933-4df3-8da1-bcb613c38ff4",
|
||
|
|
"indicator--c9ec62dc-91c4-4c20-86f6-0410b1934869",
|
||
|
|
"indicator--9f790ed3-8ec5-40c0-9972-258a01aee412",
|
||
|
|
"indicator--e9560734-bb07-4791-ac32-e8a21c5176a3",
|
||
|
|
"indicator--f8a5062f-2412-448a-b9c6-477ca028f58e",
|
||
|
|
"indicator--4fb23199-ae71-4728-ad64-416ee964fd1a",
|
||
|
|
"indicator--1848bdeb-c57d-40e9-ae53-3985d4bd9967",
|
||
|
|
"indicator--ca570512-b80a-4165-a6f9-8c4b9b7cfbe5",
|
||
|
|
"indicator--f930096c-0fe3-4e3e-a717-891b9de447ae",
|
||
|
|
"indicator--39a86461-7169-4a41-b051-832846255377",
|
||
|
|
"indicator--59504dd9-63ce-4f02-ba4a-b9d3601a729f",
|
||
|
|
"indicator--93aebd11-d428-4817-8021-474bf9f7b010",
|
||
|
|
"indicator--b7625409-23ef-43f9-9bd3-eb3381b5a6b2",
|
||
|
|
"indicator--1d7fe606-8244-44c3-a2ae-dc318bfcec47",
|
||
|
|
"indicator--b55ddc55-5d2e-4ffe-8d81-ad98b13b84b7",
|
||
|
|
"indicator--d1f442f3-312f-4de3-b73f-c455f02dd424",
|
||
|
|
"indicator--6e6558e3-848c-44ec-acb8-cb59be2ce2de",
|
||
|
|
"indicator--cb7cf108-3fea-4039-b65f-f6884932b843",
|
||
|
|
"indicator--93ddff1e-752d-42da-999f-d6b79f8f86fd",
|
||
|
|
"indicator--0287c748-2a1c-40cd-be02-e63a31e949f0",
|
||
|
|
"indicator--2bf44c43-8d2b-4d95-bb10-bcb71647d695",
|
||
|
|
"indicator--a74f9ce2-ba57-4de4-9374-5a0d67f7272a",
|
||
|
|
"indicator--e63672a1-723d-437e-a480-61f837064dbf",
|
||
|
|
"indicator--4d3d6e25-fec8-44b9-b5eb-16d261c3b493",
|
||
|
|
"indicator--72662ce0-2ff0-4efb-b6f0-4d2bebd2db5e",
|
||
|
|
"indicator--7eacc186-dc5c-4ea0-834e-115707abba54",
|
||
|
|
"indicator--4e76f445-d0d8-4bb4-9e75-4ef6316a72eb",
|
||
|
|
"indicator--0af3a9dc-f58f-4fd7-b870-6e4a64f3747e",
|
||
|
|
"indicator--70a6ffdf-59e3-435e-a869-768cccda7522",
|
||
|
|
"indicator--9642727a-0b67-4e7a-b0f3-11611972fb82",
|
||
|
|
"indicator--875150b9-6ca6-4a50-a895-427138205ca6",
|
||
|
|
"indicator--29fda4bd-e3e6-4769-847b-f89c992cbbe6",
|
||
|
|
"indicator--79381b8b-9ed6-4179-ac9a-6a39899bafd5",
|
||
|
|
"indicator--88b770da-b41c-412f-ad7a-dae05241cdb7",
|
||
|
|
"indicator--5317b2bb-7b6b-4614-b64b-0c6ff0f79cd1",
|
||
|
|
"indicator--97b79e14-79b3-4d7c-a6a1-241aad37bad9",
|
||
|
|
"indicator--53919ac0-9833-4ca0-b868-96ba1fdcda54",
|
||
|
|
"indicator--105fc72d-74ce-4c24-8b3d-4dab9b42dfe5",
|
||
|
|
"indicator--c0f8a7a0-1fd4-45aa-82a9-5664ef1565bf",
|
||
|
|
"indicator--1f0ee0be-4438-4591-91ad-b61b27a995e7",
|
||
|
|
"indicator--aec1ebd9-c894-40ac-a6a2-d84477f9316e",
|
||
|
|
"indicator--2da778b4-de79-4a9a-94a4-da33b031b8d8",
|
||
|
|
"indicator--3c45ac45-4bbb-4212-8cdb-50e10c05f53c",
|
||
|
|
"indicator--c541b6ff-72c4-4954-94b6-10ac201fcd9e",
|
||
|
|
"indicator--e3b5ab8a-1e78-4094-b71e-fbf7243c13d2",
|
||
|
|
"indicator--480ebd16-4ceb-472a-9e5b-df4d13a3af5c",
|
||
|
|
"indicator--21f032ff-0e2c-4460-8f3b-5dd3e1bce252",
|
||
|
|
"indicator--a11506c9-9db3-4cb5-8c66-b3ed9a15544e",
|
||
|
|
"indicator--40e6017b-2037-404d-8bce-fe3288be47cf",
|
||
|
|
"indicator--0276df8e-d6c9-4fec-a9a5-4d4bdd9e6e08",
|
||
|
|
"indicator--d29ce81c-38fa-4507-8427-a9685bbc32d1",
|
||
|
|
"indicator--34fb2ee5-288e-40d7-8ce8-8ee828738863",
|
||
|
|
"indicator--a432c674-bb4a-4ba3-bf3d-39791cd64e78",
|
||
|
|
"indicator--1d4897b1-6f0a-4195-856a-277cd801a016",
|
||
|
|
"indicator--2b8bbc63-0d42-4a3a-99be-d17b78ae6a6a",
|
||
|
|
"indicator--e299808e-9148-4f80-961e-809f42495fb1",
|
||
|
|
"indicator--2e928354-328b-4d95-af5c-4323e113cfe3",
|
||
|
|
"indicator--86cbdbb1-abcd-497c-8cbc-796ac5c20267",
|
||
|
|
"indicator--e8dca38d-e6cb-4650-a637-d9c5adaa15c2",
|
||
|
|
"indicator--e56e32de-7a16-471f-aab5-9bc5c65b063c",
|
||
|
|
"indicator--77b8f36a-1fb3-404c-902c-5973d365e1e6",
|
||
|
|
"indicator--875b4199-a303-4065-902a-929b417cb0c6",
|
||
|
|
"indicator--cfd11544-6d2c-4219-9e8f-684e0aa2e527",
|
||
|
|
"indicator--adf4d5bc-05bc-4615-81aa-abbbb39ab28b",
|
||
|
|
"indicator--ff83476d-1432-483f-a55a-e3d5ec1afa19",
|
||
|
|
"indicator--7b8937c4-ca25-4c30-af1b-1c0bfc62b592",
|
||
|
|
"indicator--51da3185-6f29-405b-bcb0-26ee50a4b817",
|
||
|
|
"indicator--7f44fbed-6a12-4132-af17-5b7e2dc4f19f",
|
||
|
|
"indicator--9ecf3477-dc1a-40f8-b637-1d8b54a6ca00",
|
||
|
|
"indicator--c2cfa08e-b99d-48b6-bc38-05b343c1f925",
|
||
|
|
"indicator--a3bad676-5edc-49e8-8eb1-d553537ac55d",
|
||
|
|
"indicator--52d1b437-94ba-4450-ba9f-21d3afaeb430",
|
||
|
|
"indicator--75002a42-c6f3-4e80-846a-7e4d4dbd43e3",
|
||
|
|
"indicator--c2ec690a-c420-4888-bda6-a2ca6a6d8ed9",
|
||
|
|
"indicator--855a3c52-fccf-4764-84c3-6b1b5200601f",
|
||
|
|
"indicator--ede52221-12ea-449f-9f9c-16b0fbec1c78",
|
||
|
|
"indicator--aa3856df-fd6a-4729-bc40-83b364cd4c73",
|
||
|
|
"indicator--15d7503d-f778-4db4-85f7-f47645d74149",
|
||
|
|
"indicator--f01fb52d-d801-4450-b326-58eac552df7d",
|
||
|
|
"indicator--b69fc1db-3424-4a01-bf50-f89444846e74",
|
||
|
|
"indicator--1d448d85-9d75-4925-ae41-426b468fa9c8",
|
||
|
|
"indicator--db685191-4ea5-40a6-b597-0748ff4589b4",
|
||
|
|
"indicator--aa3b285f-082e-4c86-82e1-f8ac1afbaed6",
|
||
|
|
"indicator--f3fcbbc3-c707-40ab-aa67-df7d53d1a4c4",
|
||
|
|
"indicator--e7b3d13f-4535-4d1f-bf22-1d90faf743f1",
|
||
|
|
"indicator--2b371e4c-b291-4e5b-80ba-1e6b8c3b9120",
|
||
|
|
"indicator--98d103e3-827c-4ce0-b579-7517419c8eae",
|
||
|
|
"indicator--c3dc119b-3299-4f71-8595-e23bfe854cf6",
|
||
|
|
"indicator--570633df-1616-40ae-be28-f753ff9e7ec6",
|
||
|
|
"indicator--9701277c-eabf-4c27-aa2b-1ce2ccb7bb7e",
|
||
|
|
"indicator--f07709ca-4572-4094-b393-06a985761975",
|
||
|
|
"indicator--dbe24604-12f5-45d9-87aa-6d4d7905eeb9",
|
||
|
|
"indicator--ec668d4f-842f-40ab-8f39-5cb2aa4026b2",
|
||
|
|
"indicator--0510a852-5fab-4c43-acb3-29ab1a0e8c1f",
|
||
|
|
"indicator--da2d079f-ab1d-49de-bf59-6f7ba63915e4",
|
||
|
|
"indicator--c7c046fb-5ed9-4ba5-8736-f1ea91bad92d",
|
||
|
|
"indicator--ecfe82ad-c144-464a-aaa5-af2a0e2173bd",
|
||
|
|
"indicator--e1045d30-ff91-4f4c-a303-67d8d900088c",
|
||
|
|
"indicator--77c533a4-a15f-43a1-96e6-cfad25b2fa14",
|
||
|
|
"indicator--8a7aa164-90e8-40f9-8078-8c1b620754e1",
|
||
|
|
"indicator--11c79e22-3158-4ce9-8193-d58181b443b2",
|
||
|
|
"indicator--5e8cc942-8f82-4584-b09f-7b9893baa18d",
|
||
|
|
"indicator--7a411fae-858b-4a99-aebe-b84db6c3d937",
|
||
|
|
"indicator--4560ac6f-7b61-4b04-9707-0d4bb01ee7c9",
|
||
|
|
"indicator--dcdd09fd-9fcb-4f64-9cc9-074a4879c406",
|
||
|
|
"indicator--0619bde4-def6-4267-a658-d1fde8051738",
|
||
|
|
"indicator--63858b92-361b-4c9e-8a78-20d946023456",
|
||
|
|
"indicator--434d7821-38d8-45b0-8c35-27ccfc794b41",
|
||
|
|
"indicator--3ff0d178-e4a1-4e60-84f1-e0020a209502",
|
||
|
|
"indicator--05c9c071-afea-4a69-adb1-573346abeee8",
|
||
|
|
"indicator--1bf0b9d6-545a-4eae-819b-74de37a4ed8f",
|
||
|
|
"indicator--75d207ae-b98f-42ef-9bba-ffe000fac4e4",
|
||
|
|
"indicator--d4a5cf97-e21f-4c64-8753-92b828c3e360",
|
||
|
|
"indicator--122186e3-274a-40ae-8a08-5ea6101a3bd1",
|
||
|
|
"indicator--06d7d795-48b1-47ff-b0a7-c50a4f410695",
|
||
|
|
"indicator--3ab4df37-56ef-4b8a-9cb6-eaf41aa8a7dd",
|
||
|
|
"indicator--430f22c1-f6d7-4d6c-92ed-9df528b654d1",
|
||
|
|
"indicator--59defdab-df49-480a-98f6-bbb34a379c62",
|
||
|
|
"indicator--8cae9e5f-e6f4-4f29-aae6-4c1e15aae341",
|
||
|
|
"indicator--4f61fb5f-8610-4a4e-bf9f-59c663033843",
|
||
|
|
"indicator--dbb2674d-0568-4546-88bf-d6b8e54a1a99",
|
||
|
|
"indicator--9b86b42a-d056-400f-a4f0-31e07f4dc523",
|
||
|
|
"indicator--9afea296-2239-4c67-b513-6dce2c9ec17d",
|
||
|
|
"indicator--1c6fe5b6-d730-44b5-afbf-7deed98b9728",
|
||
|
|
"indicator--ea0513e6-8881-4c6c-a7a3-ea990f0c739f",
|
||
|
|
"indicator--b53afb3e-ecbb-498e-9056-11128faad38f",
|
||
|
|
"indicator--179a384f-8996-4eff-9c61-f082ff542575",
|
||
|
|
"indicator--ce1ba968-5cdb-43e1-8341-298de5b4adc5",
|
||
|
|
"indicator--f74b1623-7220-498d-bfa8-a67b97aed1fb",
|
||
|
|
"indicator--5f1e2284-3284-4aa7-b47d-bd12f43595ec",
|
||
|
|
"indicator--9ffb2b95-ab5a-4fee-aa6e-2e69b5e28bc7",
|
||
|
|
"indicator--ef5522cd-c209-4506-9f28-7bfd28854f96",
|
||
|
|
"indicator--7b53a42b-436a-4996-9157-16326ac2d6b8",
|
||
|
|
"indicator--ada32362-b07f-4c1b-8038-6ef8214fd40b",
|
||
|
|
"indicator--57b1ef25-a25a-4766-bf71-91734f529d2d",
|
||
|
|
"indicator--d9aeaf5a-f9c0-413b-b87a-b2de6ca73693",
|
||
|
|
"indicator--0575baf0-e53f-436d-805f-fdc4cfc5618b",
|
||
|
|
"indicator--99e6fcc6-d1bd-4a75-8457-939aa7215879",
|
||
|
|
"indicator--12edecdf-e9e8-44e1-a915-1d30e58e45bf",
|
||
|
|
"indicator--8c1a3e39-046a-48f4-882c-2cb1134cd217",
|
||
|
|
"indicator--aa40b44e-0328-43bb-b9c0-3e51d8659acd",
|
||
|
|
"indicator--009c1052-ce39-4222-8cbd-3bae1ec00719",
|
||
|
|
"indicator--42ee98e5-276c-42d8-a817-3842fc2c8b35",
|
||
|
|
"indicator--76ff923f-5db3-4bb8-8023-d4940660217b",
|
||
|
|
"indicator--904f338e-d688-4ba1-9741-dd01afda9d77",
|
||
|
|
"indicator--3a6d13b0-18e4-483c-aac6-ee2f2377d469",
|
||
|
|
"indicator--b2f30841-b47f-4363-adb6-cfc6385aff51",
|
||
|
|
"indicator--30872f7b-4fca-4cd9-a0e9-3aae02a936a4",
|
||
|
|
"indicator--33806120-6506-48b3-b5a8-b4183ebbc6d8",
|
||
|
|
"indicator--51970a31-971d-4634-a1f4-8d0ddc8133b8",
|
||
|
|
"indicator--4b73a992-9fb3-491c-868b-aca1cb6bc1f2",
|
||
|
|
"indicator--2c78ba3e-3825-447c-a931-9607f9694be7",
|
||
|
|
"indicator--13e955c1-9661-44be-9044-210ad97a6ff6",
|
||
|
|
"indicator--70022e4e-b60c-49db-a49a-4369c9d64ed8",
|
||
|
|
"indicator--e4e3c9b6-9636-416f-b94b-d72d4a933684",
|
||
|
|
"indicator--bc194aad-6e57-41f0-8ef4-9ab550081faf",
|
||
|
|
"indicator--aaa6d891-77fe-485d-80f1-4be9815860b0",
|
||
|
|
"indicator--3b38c66f-e2ef-486b-beab-efc9f812a3e6",
|
||
|
|
"indicator--87f1c0b5-100c-4a4c-a2b9-4214cc3f47e3",
|
||
|
|
"indicator--cc134346-bbd0-4e4a-be49-2cb5612b0283",
|
||
|
|
"indicator--46290018-d04d-496b-b9ed-1da6a646ab0e",
|
||
|
|
"indicator--a67097c3-e6d2-41b0-a87e-74a545a8df13",
|
||
|
|
"indicator--00dd8263-2b74-43e9-a5f1-621ce6e6b94a",
|
||
|
|
"indicator--866d8ae6-fe78-469c-999e-886cb9900cda",
|
||
|
|
"indicator--de8eadab-ea05-4e06-b23d-b922b9407a34",
|
||
|
|
"indicator--f69badfe-a4a3-4183-af93-4247fe8db7fa",
|
||
|
|
"indicator--19b96a5d-4b3c-4f38-bcb5-a0b1e297ac53",
|
||
|
|
"indicator--49035831-30cd-4c72-870f-dec69207ca93",
|
||
|
|
"indicator--452f4b9b-1516-45a9-9bb9-bbc51861d011",
|
||
|
|
"indicator--2706547b-0ae0-48ab-a099-c2456dbe38a6",
|
||
|
|
"indicator--8ee6c7dd-614a-4e86-a078-cc9c6b8b1af1",
|
||
|
|
"indicator--4867c6e3-e78a-427f-ab12-45307aa535e4",
|
||
|
|
"indicator--60f8bffa-cf22-4e1c-ad41-099f872ff68d",
|
||
|
|
"indicator--6391447a-a3dd-4730-b662-221f32eaf0cc",
|
||
|
|
"indicator--871662f3-0bf4-4e65-8799-10436e3af35f",
|
||
|
|
"indicator--d62e320e-bfe1-43b9-b7e3-fc4eb5f128c1",
|
||
|
|
"indicator--0dfa527b-5edd-4966-80c9-543eec828796",
|
||
|
|
"indicator--b1ac84f8-4223-4591-b7ac-e7f5d4222a20",
|
||
|
|
"indicator--6fc167c4-4c0a-4935-a01a-9144db97787d",
|
||
|
|
"indicator--db454d16-9c3c-4d98-80a8-940e72c8afbb",
|
||
|
|
"indicator--9d69995e-8f58-48e2-9371-65636c3f08c6",
|
||
|
|
"indicator--eef393c3-93c9-4e99-9882-c42f6514dcc3",
|
||
|
|
"indicator--5da5a052-70b2-4de9-8c86-4f459244e4c0",
|
||
|
|
"indicator--e4db6170-1fab-4c3f-b2b5-7f8f06f877ac",
|
||
|
|
"indicator--fcd05303-1cfb-4b0c-b99b-5cf6f115effa",
|
||
|
|
"indicator--0957f302-6642-4913-98ad-97da94aec4ad",
|
||
|
|
"indicator--0f3da3cc-2307-4298-9745-4fb0ec1d5b7f",
|
||
|
|
"indicator--09de70b1-d76d-49f3-96b6-a333c900c2fd",
|
||
|
|
"indicator--8e982c16-4c02-4295-bd84-99f10dae27cc",
|
||
|
|
"indicator--3bfd242c-07c0-4a49-ad16-eb80c22cab32",
|
||
|
|
"indicator--c138973c-ed69-478a-98f2-1a3a362bc28c",
|
||
|
|
"indicator--8a9155bf-29e0-4f96-8862-a29c16c80f9c",
|
||
|
|
"indicator--68f37c46-68f8-41b6-920d-0f94150890e0",
|
||
|
|
"indicator--00c2cca4-5332-4613-930e-b1e1ad3e0cb3",
|
||
|
|
"indicator--602786c3-b78b-4dd6-b5be-b4ac65af38c3",
|
||
|
|
"indicator--d7feba5b-7256-4545-904e-0379d4a6662c",
|
||
|
|
"indicator--e6abab13-0f40-48ef-8692-47c634ac2322",
|
||
|
|
"indicator--17a82fe1-7b6a-47ea-8057-aa8adbb9e733",
|
||
|
|
"indicator--681d722a-bff3-41e0-92d1-3f18445818b8",
|
||
|
|
"indicator--2c6ac715-2078-42b4-a089-527026e44519",
|
||
|
|
"indicator--e9c2a447-f613-4ee3-8208-0e12a4b21948",
|
||
|
|
"indicator--a4705d07-1580-45c9-841d-e53ab40080f8",
|
||
|
|
"indicator--de17361a-7915-4f58-83f4-b47d90ddfc0e",
|
||
|
|
"indicator--231eeafb-599b-4be9-bab3-823874531141",
|
||
|
|
"indicator--af2c61a1-58ec-412f-94b3-13e0dd006e1e",
|
||
|
|
"indicator--5b652cbd-a7a2-4e02-9eb0-14e01c49d228",
|
||
|
|
"indicator--72c771ba-1130-4f4b-b7ff-df2ea95da93c",
|
||
|
|
"indicator--858aaa64-9a86-4cb3-9e97-b78c87e94731",
|
||
|
|
"indicator--81fd81ac-5b71-415c-9a5d-897125ec3ff6",
|
||
|
|
"indicator--261f7dd9-308c-48b0-a96d-5da2ce67da15",
|
||
|
|
"indicator--3bb4df72-ed86-414c-a7e8-f66cef813ae1",
|
||
|
|
"indicator--e060333d-66ad-406d-8745-21107b0223cb",
|
||
|
|
"indicator--9a8e73ab-b4dd-4d72-889a-efa8849889d6",
|
||
|
|
"indicator--e3ee841c-7020-454e-a12b-01ba8c739616",
|
||
|
|
"indicator--af63a52c-9573-4b05-8b54-72424eec6d97",
|
||
|
|
"indicator--1140b177-79b3-4a8f-8e79-23576dad0908",
|
||
|
|
"indicator--98bf836e-de81-43db-8a6f-00f36f1749e0",
|
||
|
|
"indicator--bc116938-e8bb-4a29-9620-37e30410ac6d",
|
||
|
|
"indicator--fe810afd-7789-4e5f-9317-355df42f0e04",
|
||
|
|
"indicator--52406ab4-54f1-4e20-ab55-841ea126de34",
|
||
|
|
"indicator--679576c5-58a5-44d0-8285-f9b3c4f1ed25",
|
||
|
|
"indicator--663b6258-f195-4b02-a974-65cfd10f04d1",
|
||
|
|
"indicator--7f85ec8d-5bad-4d6c-b145-e34f3f7b2f61",
|
||
|
|
"indicator--64710abf-28f8-4946-bcf3-2b02d78c9703",
|
||
|
|
"indicator--9f9854bb-8783-4751-b885-e985b6dbc04e",
|
||
|
|
"indicator--ee43d838-04d3-441b-aeda-ff289c88cd55",
|
||
|
|
"indicator--66f3eb29-c0d5-4361-8b02-4b58a0674f11",
|
||
|
|
"indicator--1f95533e-2a67-4b80-a06d-737547dd2265",
|
||
|
|
"indicator--b26cb914-fbb7-4e51-bfeb-86ee2c6e1bc2",
|
||
|
|
"indicator--8498c9b1-da4e-48f8-9c15-eaa73ccebd14",
|
||
|
|
"indicator--2d7deb83-efc2-4eeb-89b7-384ef74fce34",
|
||
|
|
"indicator--57a3d48c-7ad4-4e80-b914-ab6cd62912e0",
|
||
|
|
"indicator--811d6716-90a7-48fd-b0e4-b7f110369c76",
|
||
|
|
"indicator--866d9f54-0bce-4abc-bd5e-7fecd6fbff0c",
|
||
|
|
"indicator--bfbcd39c-2996-499a-bae7-7b1e0fc99c62",
|
||
|
|
"indicator--c34a055e-7566-419e-884c-11f7be16fd94",
|
||
|
|
"indicator--8189dcb3-45c4-4a18-84f2-4cf3e1272608",
|
||
|
|
"indicator--6c8f81fb-98b4-4d0e-9ddb-acb0b9f13990",
|
||
|
|
"indicator--74effc6d-397d-46cc-acee-7dacba5d5ec1",
|
||
|
|
"indicator--c2cdf2ea-651a-4a52-976b-83f091eab390",
|
||
|
|
"indicator--b34b7034-d70a-4928-ba7a-50432438773d",
|
||
|
|
"indicator--508e7509-1476-41b9-beb2-bdf960f10700",
|
||
|
|
"indicator--d2a492e5-8f91-4ca8-a289-123744fd4a10",
|
||
|
|
"indicator--0593ba8d-f31a-4336-8304-0a4d3ca24e8a",
|
||
|
|
"indicator--3952e1cf-727d-4f30-a303-266452cd7322",
|
||
|
|
"indicator--4d814855-188a-46a9-9ae4-050d64185995",
|
||
|
|
"indicator--72bcdd18-21af-4a45-88ff-8f8b9d020791",
|
||
|
|
"indicator--c41b749b-47c1-47ac-88b9-fd9b7c6c8308",
|
||
|
|
"indicator--823c2734-6d5c-41fe-b9b7-35e524709c32",
|
||
|
|
"indicator--a412333d-f32d-4206-88ee-49a0908795b5",
|
||
|
|
"indicator--256f7ebc-3772-4599-b230-fd652af3c987",
|
||
|
|
"indicator--5b788308-e351-49d6-8ca9-ef329224b169",
|
||
|
|
"indicator--bd0deac8-2070-4fc0-b403-7563e4bdb2e5",
|
||
|
|
"indicator--60ba2a87-53e9-43bb-a634-8aee0911f7e9",
|
||
|
|
"indicator--3f11c16c-1f28-47bb-bbfe-50473b13e5da",
|
||
|
|
"indicator--cd7ba55a-02cc-4df5-84f8-28bbf6fd3d36",
|
||
|
|
"indicator--880fc9af-e95d-4e7d-9d33-3fb7e88b3e37",
|
||
|
|
"indicator--758b2531-3e6c-41a2-86a1-3a74015e13a5",
|
||
|
|
"indicator--8508b97c-917d-4393-9d6b-feaa9dec7fe1",
|
||
|
|
"indicator--6916fd07-8b0d-407e-9c82-5afc501fdcb2",
|
||
|
|
"indicator--98c62622-27a6-4e82-a7d1-9ad8c867b20f",
|
||
|
|
"indicator--4c650d97-60c1-4d15-a4d8-fa15403f67d4",
|
||
|
|
"indicator--d95ea459-a464-4c38-8569-f74a69ab73df",
|
||
|
|
"indicator--3eae7f78-2315-420b-b294-ada965e80f85",
|
||
|
|
"indicator--cf6150b8-75fd-4845-abf0-0083b0f9ad06",
|
||
|
|
"indicator--99f141d3-5296-4966-9c59-6de310cab38b",
|
||
|
|
"indicator--64d59390-188e-4c75-a10a-38d50c53df60",
|
||
|
|
"indicator--e24c5a90-9f9f-4799-801e-25e8e14c1542",
|
||
|
|
"indicator--f8bdf86e-6885-4636-861a-1878e759cc8b",
|
||
|
|
"indicator--8e672e5a-83f0-40e3-a0d2-512fad0097c8",
|
||
|
|
"indicator--656c2033-2334-4fec-96ac-441622378112",
|
||
|
|
"indicator--16f3c7ee-6dad-4631-a58c-56e0d1c93452",
|
||
|
|
"indicator--cf1f65cd-d67f-4380-8352-84db761fc3fe",
|
||
|
|
"indicator--8a073fac-692a-4ec0-a962-5537ef4d13b7",
|
||
|
|
"indicator--0045313d-eebf-4d78-87d3-05912e442d6e",
|
||
|
|
"indicator--225e17c4-8877-4dc5-bb7e-0e6ad55535f0",
|
||
|
|
"indicator--16b1a1ea-da75-497b-9366-6560a32a7f63",
|
||
|
|
"indicator--e69d20f2-9073-473b-9c9a-d15e14b6bf87",
|
||
|
|
"indicator--2238fd85-99ab-4126-8153-42dae1c4daf5",
|
||
|
|
"indicator--5fc1ff85-5985-4078-bfaf-c2567cbc9b5e",
|
||
|
|
"indicator--0561eddb-2ba2-484c-9e01-a574a53a3417",
|
||
|
|
"indicator--c2f3e058-f1af-4c9e-b6ae-dd526ae698e2",
|
||
|
|
"indicator--a836201b-1f4f-46ba-98ad-e40aa3004e71",
|
||
|
|
"indicator--0b8f9226-e753-439f-952e-e6005d9cea4c",
|
||
|
|
"indicator--930aea70-cbfb-4e9c-8ea4-514cb79fa73f",
|
||
|
|
"indicator--00f7245c-1384-459b-bab6-d88b68bc1dc0",
|
||
|
|
"indicator--7eb8afde-f6b4-4a2c-93f0-48a7a1c6f3f5",
|
||
|
|
"indicator--54059dac-6ab1-4cf2-b441-f3d687fe05ba",
|
||
|
|
"indicator--2ba30037-8e96-44ff-8c81-1eab285d984d",
|
||
|
|
"indicator--2abeb197-0c61-46e8-a6a4-f44020fa4d8f",
|
||
|
|
"indicator--ad9b853c-b17f-4d9b-9980-4f6f9ba58956",
|
||
|
|
"indicator--1d9554be-7499-4adb-b478-ab3b3d91f001",
|
||
|
|
"indicator--aee69dbc-026d-4dc3-a5f5-c74cc5c9c9ee",
|
||
|
|
"indicator--24fa7677-01f9-481a-8db1-1d3c355c42ad",
|
||
|
|
"indicator--6ac1e418-acf3-40c4-a3ed-c8b62681024a",
|
||
|
|
"indicator--876697c4-ce51-4b1f-b3f4-f9cfdb69190b",
|
||
|
|
"indicator--b46e7057-e024-41a1-9d21-9f0589c46200",
|
||
|
|
"indicator--ad398999-2a3f-4470-b1c5-cd5fe532ae0b",
|
||
|
|
"indicator--6a455eaf-1452-4ac9-b993-90ba66b6bba9",
|
||
|
|
"indicator--d43192a9-308c-4fb1-9703-eae3843bafe1",
|
||
|
|
"indicator--cf382d7c-9627-46f7-a07d-74d4df60a9e4",
|
||
|
|
"indicator--5c30c867-12f8-4243-a7b2-ee5c47e39aed",
|
||
|
|
"indicator--955ad694-c80f-4920-9b05-e4c91e06c85e",
|
||
|
|
"indicator--86268b26-e003-4a90-8d0f-26349d617080",
|
||
|
|
"indicator--054d3da9-f75f-42ea-992d-6d498c28a85a",
|
||
|
|
"indicator--5129702a-77b3-48b1-9ee3-85d208c0d6db",
|
||
|
|
"indicator--fd9cd873-3db7-4f92-81dc-275063df6a4c",
|
||
|
|
"indicator--c9a4f1d9-ffe7-4ac5-a17d-635ca11d1749",
|
||
|
|
"indicator--c00cd553-f665-4f6a-8463-4a92258a12e7",
|
||
|
|
"indicator--c82c0792-d95f-4e7b-8b3b-10ded2577627",
|
||
|
|
"indicator--295d1398-2035-4549-8523-021cee32534e",
|
||
|
|
"indicator--922fbee5-d310-416c-93ca-2e72c40b887f",
|
||
|
|
"indicator--f58a84b6-dfc1-4d53-8446-ec01e72a13e3",
|
||
|
|
"indicator--32383e32-e8e0-40b5-9280-4496d451cce5",
|
||
|
|
"indicator--b00bf2d7-af95-4903-ae03-5a3a83063660",
|
||
|
|
"indicator--2b8c49c8-1dc5-4297-bed2-740a23d6f836",
|
||
|
|
"indicator--bdd354fb-63e7-4e14-8134-cca4fd1b0e0c",
|
||
|
|
"indicator--cb587c78-cfde-462c-8182-eb69d087895d",
|
||
|
|
"indicator--1d4038b6-9acb-46c0-b972-62a69794108d",
|
||
|
|
"indicator--e52ec038-aafe-4450-be63-11a604bfab3a",
|
||
|
|
"indicator--4792535f-f13e-442c-abe5-38d688a6e2dd",
|
||
|
|
"indicator--464f5060-701c-41cb-86c6-d1cf8decfd03",
|
||
|
|
"indicator--cc4c8634-3931-4d9b-9ce5-bd51f3f59651",
|
||
|
|
"indicator--78ac5ba4-f787-454d-9e1a-7cce405ce1e4",
|
||
|
|
"indicator--f6f0e447-2413-418c-a426-3b53243f2e6a",
|
||
|
|
"indicator--39310645-9ab6-49aa-aca8-e676600edb56",
|
||
|
|
"indicator--8874ffe0-5296-4b82-bb3a-939a5f58b7e3",
|
||
|
|
"indicator--be0ab8ce-6a3c-4d0e-a584-05a6155059b2",
|
||
|
|
"indicator--12be3a2e-4e79-409c-9c7f-e4f193c5d1f4",
|
||
|
|
"indicator--7193f109-b139-4b8a-944d-b6be3efd1a62",
|
||
|
|
"indicator--b7a41960-d307-4377-8dd1-f92f203523d7",
|
||
|
|
"indicator--318fa34e-bfb1-4b78-a9bd-f9ac1a46596f",
|
||
|
|
"x-misp-attribute--55d42f26-69dc-4ab5-b636-4bba950d210b",
|
||
|
|
"x-misp-attribute--55d42f8f-2f94-485c-b2aa-4e8f950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"type:OSINT"
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42215-4988-43e2-8a99-46ba950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:28:37.000Z",
|
||
|
|
"modified": "2015-08-19T06:28:37.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"last_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55d42215-4988-43e2-8a99-46ba950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55d42215-4988-43e2-8a99-46ba950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/new-hacking-team-iocs-released/"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42215-fb80-47f1-b490-427e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:28:37.000Z",
|
||
|
|
"modified": "2015-08-19T06:28:37.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"last_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55d42215-fb80-47f1-b490-427e950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55d42215-fb80-47f1-b490-427e950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/Package_1.1.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42215-d6e0-4a93-ba35-464b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:28:37.000Z",
|
||
|
|
"modified": "2015-08-19T06:28:37.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"last_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55d42215-d6e0-4a93-ba35-464b950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55d42215-d6e0-4a93-ba35-464b950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/openioc1-1.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42215-99fc-4fab-b3c4-4ab2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:28:37.000Z",
|
||
|
|
"modified": "2015-08-19T06:28:37.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"last_observed": "2015-08-19T06:28:37Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55d42215-99fc-4fab-b3c4-4ab2950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55d42215-99fc-4fab-b3c4-4ab2950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/openioc1-0.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--55d42226-1a70-4e99-9d89-422b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:28:54.000Z",
|
||
|
|
"modified": "2015-08-19T06:28:54.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"text\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "External analysis",
|
||
|
|
"x_misp_type": "text",
|
||
|
|
"x_misp_value": "Hacking Team"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:34:15.000Z",
|
||
|
|
"modified": "2015-08-19T06:34:15.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:34:15Z",
|
||
|
|
"last_observed": "2015-08-19T06:34:15Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"artifact--55d42348-63fc-4738-91b2-4719950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"name": "ht_malicious_windows_files.ioc.xml",
|
||
|
|
"content_ref": "artifact--55d42348-63fc-4738-91b2-4719950d210b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--55d42348-63fc-4738-91b2-4719950d210b",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T06:39:11.000Z",
|
||
|
|
"modified": "2015-08-19T06:39:11.000Z",
|
||
|
|
"first_observed": "2015-08-19T06:39:11Z",
|
||
|
|
"last_observed": "2015-08-19T06:39:11Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"artifact--55d42421-b410-4685-9508-4c96950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"name": "ht_malicious-high.ioc.xml",
|
||
|
|
"content_ref": "artifact--55d42421-b410-4685-9508-4c96950d210b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--55d42421-b410-4685-9508-4c96950d210b",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7601241b-c480-4eca-a333-a86930f488fb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9ff1afd5fc8595cd35741696a7a24a4c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--771f6859-8317-4c89-b891-e83c3a3d64cb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '637cf542512b0b6507b39686c7e87af30e7aa3a02eb9481a49efb4d0951adfe8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--af304c0b-b8b2-4c23-a1a3-f56c997db033",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd73123ae61b9183f82ac9fa64c813f2b7483e772']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--26df82cd-660d-4d29-995b-2ded2d8ed0ca",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd553160f4db53c3ef30bf57aac67811a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f972109c-f5c6-460f-b802-b9f31303c5d8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2c2a1044acd7d47ade2e74b06fe366fdc1c363297b5292c8a362f34018ae100b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--69d16485-a76d-446b-8064-4a59d5987ded",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3412967b6ff4d2ceece701b899571987b8c5d70c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--795350eb-3004-45b5-a357-6a66454ee863",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a7bb3bcbd0b76c71cead0c9c41d060f3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--dd9f0078-98ea-4801-ba4d-c82dff90581e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6e6f6e40a2716d11425a88b560e80fefd1a16d81ddee9663ff42ab82ea3a35bd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6a2c8964-043e-42f0-8e6d-c3656139ebe7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '84fe4e29cceafae55caf85952c0a83b92c75fba1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bf559b91-bc9a-4af2-8bcd-8dbbbf77870a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f69da77c13a651074c919ab26507c011']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--098a82af-02a6-47ab-a27e-6e13da4b9008",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '07ed3d9bd82a3b490f33f36117af3ad02152d51e9c2470eb0089dab1305368f1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c5b529a2-03b7-4b8d-990e-dc574bca89a7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c926351a98a617b0be47608c5d03d08a2a82ee1d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f0df95c2-b23c-4469-85ae-bad7efd0639f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cef9886a936a35af81ed23b702305ab6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0dfc6973-f521-4633-b7dc-772002d7d934",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '61fe96a5118b531e7f1659085bcd61084354961fb557588bae3619665a8dc681']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f89d2a80-f560-4674-9992-c602515bdd5b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bbfbf78a4bfa692b9d152ecc679dcfe1db63ccd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--236c8501-a729-42fe-8832-a98746e486fc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '637969fbc85e184e93a96f146abd7bad']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--23b15940-0ea9-4d20-a6d0-8bb0f7cc879a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9261693b67b6e379ad0e57598602712b8508998c0cb012ca23139212ae0009a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--89881e94-cf69-4b56-bcb3-f0daed873beb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8561291a00ec2c7cef2bd1d5daf48b350baeae8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a32811e4-2da3-41f8-a8a0-f4e8520e2714",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0a011ad2222a93014e7420db94f6aa2d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8e9fc219-838b-4365-a362-6d2509702407",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7279dfe295bfb075bff6a856097491fbd4c932970bb654c969a995322f0d03db']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--006bce3c-3090-4523-801c-301624e21edb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b36ceec3b2bf64802b56c610d3f0be29adc7d4b5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9913b313-a2bd-41ac-ac22-462b4cb95b1a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f4f3692c0bb00a94130d3b205e1e9baa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e0027e4d-fc48-4107-8afa-6a01252c7966",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3ea8909c7e92d10a39ba08b002b489e718d77f12754e1bac8e69d62891ac8417']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c83eacf8-d705-4af2-b5bb-e92f11966a03",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7818cbabec362de92407234c123f5a6dd910122c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9d67cf49-1f1f-42d3-b2a2-5c314d8fe907",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a0764ea07a40604b295e8600a3b73231']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b9a6cbda-853e-4cbf-a308-2d4d2da7a0c7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9a1dc317baac5b31e8f9498c979e623db6e57f34aaea6dac923853cec1a30397']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--840e5e80-4bb1-447c-a299-ea6ed86c510d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ed91c8a09126bd27edeb0a6f9e5ef64a9b5bd29c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--10920f03-9f4d-40c3-b152-70defe2aa72f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '38bd6cd2b91810c30ceb661e54032f5c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--597c5c12-44ce-4abe-ada8-47b221f40f02",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '92af7c751d9353ceb1b449bb6ea1a29c7a68a5bd2344759ad1c974ac5c63dee6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0aa21b78-d0bb-4a4e-aca1-50458a43dfc7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '158be9f90b5f37590808e0c97323b6476d4c9f9b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e205621d-5ed6-4232-9e1a-e5d9860c7648",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '84964d5410d6c7754e36e7592334df5e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f7fec521-30bc-4514-8511-2c666e0638a8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'da07eca4cd4cccc81d9418fcc796d28bc95756c8d6d4ad9503effd12b6c0aef7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--86143338-401d-4cc2-9f02-f31c2edfbe25",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '11c87f734bce1fec82087fd16e568472e960fe17']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c5d5235f-b305-4bd0-9561-fbb16dd90a52",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f62c6e428738f074cf90f21e289dd34f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ec3b4c30-4e89-4c9a-9a64-30f9f5f3c1c6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a4afe60c024a34ae16dfbde1224550224ab3195f3d5dfe35c50ebd6a12fd4170']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--84a47f78-7624-4880-b833-4b7bf7c2a25f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'be8a1093a62d3c2741227510ec09029a18b23a27']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cdea6843-a984-4c2b-9fe3-3e8374bbf7d6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '27fdc0db940764a1218b7a3698571bf2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ef818f7c-f61a-4fdb-b06d-b184b77071ec",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e2f8c5f8c3ab687b91dd28081fec71e0bb9f70066237768e7020fd992c80f2d5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c1b5aa39-e237-4904-ab2f-e5b03681ff54",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fb106fdbb8ab0ee1272271aa880c254f8da59e42']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6b8f66e9-b151-44f8-81f3-917c9f110f43",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '360303fbb9f31d82afae87a4e71c8e93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7065b16b-cbbf-4c45-9b0b-ffad3e157009",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd31c5d91556d0dc52ddc77d70678441f6f7a647eaaf8e1438fdc5cf3160fb935']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c277854e-08d7-41f3-a891-60b14b86af68",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3cbedf6f7e7c842f1aa3cc6440449fd2defa7df7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--01f59ad6-b718-4561-a9ce-bb7a6a926036",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '47aeacba39f33b6ce2fd1f654f760a6c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0a26d6c9-1cb7-45ff-ade8-ab0066f67a01",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '40a10420b9d49f87527bc0396b19ec29e55e9109e80b52456891243791671c1c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--718297c5-45c2-400a-83e9-19620c79a4f3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '48220b4aeb4a96e983d6b1478144592e26fc982b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--291a75ca-0cdf-4fbd-86f9-b5882bcd868b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2b7677ebb41abfd97225b2dcf8bbea35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--59fda003-3d7f-485e-9f18-827d29695be9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'dac6abd5ba0865b7983cff40f7a13d9cde89fed3c5b81c2b785e884f9ccdf28c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3edbc8e5-1c44-4b29-81b2-3030ebc925c1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd86c6c85f3fe7981f7824f21bcaf45f876943e55']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7eeaf59b-a707-4100-aebb-de8dbb07d1cc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'be6655c17f0a797f2c01b2ab42b55107']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--be798f89-a14b-4393-8053-3e5b0aa9851c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7561ace6f04ca6d023d7eba0c8cd49b2515baa71a40926f625538e41e21f641f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b49dde61-87ba-4c9f-8845-617205a505d8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f7653b3b9d71303d8ac9425985400b321934ddcc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ceec65fc-d2bb-4d56-af56-35e156870175",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '83aff63d5b3855cff982422bebc779d4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6347c961-dedd-4236-966e-caa4393f043d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '32599e86cb3bc9e1f91ff630fa41cd140354a21ac47bdb48082fbb8fba900f53']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8b636cba-02e5-4dca-8c50-1e9bc8b901e6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bff3f180564f072f45d72bd6a840e9cde68e863e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--43b677fc-f907-44e4-bcf1-93f037f8bee6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4170d7f066178181b7f86b5a1125a761']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3e82c2af-9d58-4286-8cce-643393fa73cc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b7df931aa020195726002b235740bc844fc4b105920d4a139ca6b5a069e43575']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--512668ee-1f2e-4723-8600-3b59105f2442",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '548e8ab0169f36b548a5aa5678ef1b033acbcda4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f166699a-e927-47fa-8781-54fbf9622f30",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a64c6ebab211184ab23ae72aebdab976']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3cde91e6-0a73-4089-a6b4-2767d0a0472b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8cf6258d002326a03cf4cd70d97837b02a1ba5f3451e88fa354947180fb93eaa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f8e36e99-f0be-4a1c-8fc0-f8b4c194a49a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '88c9e88086c8aa987eeebe70c5876b7660cd12d0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d093acf3-156d-4faa-95fb-6d4368b470f5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f91a6d14a7e0257d2da9b1b6fbc6010c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7b5a0b53-f7b7-4cf7-ac47-bf0b13232053",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72ec760b698dc19693eaa846b2cc21ebceec4ee122feb30cb0802a9920af9898']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d1a8b930-1e18-4f60-b907-ccaceb3e26b3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ac8945be4493b660b4ab4283e644b9b0ab3f74a7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b47eb83f-f9cc-4fda-84bb-1dfa5d89ca90",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '652a5cd27ff8966d26db94bb394ce4d1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bb45dd8e-a90f-4dad-93d7-116c52d89682",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b6d736a68360253a94cc89bafbfa3141c382079d3e74346b12251da26149d1c3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9b57917a-2ec0-44d4-8f23-4daa0ac81f92",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '21b5f25b33e6db635ecc245291b092748d075719']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--46bd539a-ccec-4613-9990-a069abba3176",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0be0c072cf2a885d77886705e24e08d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a1076a32-e1eb-4002-8e5c-f052266942b3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b924993e72cc8fd0b505e95cea5e8b09d17d2a15c9d9ebc2b0c32843edcd40ee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3485a752-cc38-4166-b7c4-710cabeabf91",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0e6ebd6d90cc59eb572762afaca548dcc63397d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c4fe772d-9073-4105-8272-e9ed13037d33",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2a2578d7f22d3b2ee52c5d46bb5fdf05']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--665989aa-829f-4841-a4c1-604147b96a1e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4d9ced2ee7d979055d33564cfa5a67773e34f3e51d615f162003311c76f51bdb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4b7f6f74-df42-4651-9d35-4d466eeb5c69",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0097a9fba6b0bcb09e9473816e51c2c8e48284ff']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--53602b38-26fa-4c3a-803f-7db5685eed47",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd341cd4cde7d8b10b3362b3d1b640d14']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0260f819-1896-4d9a-914a-d3d78f6e6de2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '639152dcce89b669fa00213d853425bee35f8b79970a663492d24ce29421fb75']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7245d375-d893-4850-8744-b03091aa856c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '753bb0e7250d930957dabfdc0809352eed153b31']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--83202bc0-1ac7-4b86-966f-8ec8c34068d1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ed6d8b6078e103b2d12a7fd339838a9c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--31e3b9c9-b00d-4102-960f-8c1627c21228",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'bf2f9d19521cae12bf25a4108418f6c234af6cad2d7a6482323a12a2da13ebd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--fa30174d-49c8-4505-be5a-dc9021879d6d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '52fa70529cee1101067e7f6cc2532ee64506ba11']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5a5b718c-6606-4622-aa32-b9c695edbc9a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '57acb822c5a03afabf9082ef3fd3306d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bab4e30c-de22-4673-85f9-020810244ffb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0dd0325e09c0ba103aedc9e899192204ab29f4a0d35a7e53e5c800d9284a37e8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ff0db605-f6c8-4ea5-8af0-01c7809ce691",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6f733dea7027321529d43421cb2cc5444b4e0785']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--dc6d06ca-b12f-4ce8-8dc5-d76763647537",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56f3437184e1ee96b1161135f3c5a1ab']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--35d2a39b-cba7-4013-b9b8-bfae680f5229",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8bba59ce301d510bc3b24c941841ee4a8b0858d37e31c9d59193b78e7da81d9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--78a4c9af-855d-43f7-923e-0a1ce42a71e1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8cddf9c84e4a7eee3da4939ee0147d1e39ee3e1f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d868bb65-e7fd-4f8e-af23-0812b8d9fe15",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bdfc8d71ed9d065f7fba87f84adeea3f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a80e7721-9833-495e-87cd-19ac00c04a63",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '91b0995ee522a6a01fe112dd6cdc21f2cd57b26ac84d8e3065f124ccb93c5eb4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7d98b78c-8395-4f11-adba-02afdb5207b1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9432d96afa2618213a7e2ccd6c9735291c694b9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--28d58963-6b22-4d87-b678-ae998ef81fdf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f063ea5b63c9eb0e8aff3420caf4b64d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4da36cd6-a0dc-4860-8712-7e88ed00b082",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ce5d792faaca61d7bb63367f8772f492ee963f054bc03e61b4fae774c3a3c343']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--91918a45-f0e8-406e-8549-0e72f100ead1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '537506539114118726725947814c6368cc507ed4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f90216db-6618-43f0-a326-71470e3dd2e8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bcd74698b43531a3df7fb2f76f4b0a56']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8bf60c35-93dd-4732-852a-9ae3e21b6b30",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a23b5fc7d309b982f9dafc712b6a95c1cfce6102f86a7dc3f3013819638081a9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e96a8c91-c7c0-4656-97af-420e90e371c5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c5959b7d97f2855950bc35c9e0477b1940a43fc2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a4e99c4c-d1d0-495f-9fde-52ccba5b732a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd9faaf817ef1c3ee664659049dde5f39']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ecfa754c-1555-4635-bbbe-eeec31d4c85f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ab4de0951de38c475d846da1da8336b97e886b6dbd694332f3624ee5595186fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ebf80a27-1336-409a-ae54-9117f055f060",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c893cd86c0e0d6ed267a5f38c8e51b79436dac62']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--06b8c67b-24e4-4142-951d-21b2a89fa86a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ae0d2278aa783b8dc1675f41cff9d07d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f450973c-6d4d-4c49-8521-fbdec8dc346b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd5b3cc429c8a6fba074d9b1e2963273ac13cead47f63dbbb97e640b74e407134']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--390d185b-ab0e-4f84-8911-45cf12db07d3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4eb87cff1cf2f1411248cd06b497cac564ed63fd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0ab4b3d2-fc28-4764-af3b-ef052cbc4fe3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5c1215ec7da96f58a1e3e66b60c1d4ed']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--af4615ae-dfc2-40fe-bd5d-4c65b31d2ec9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2ef643a29808aa6dedeb69165d8682d5a58a95aa68bce856783a2b8dc2d71087']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7b57726e-ca44-48e0-885f-726dca3efc0c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0837b3eed579123555ae09244b3f23aded72b9b4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--258109cb-e210-4eaa-bb41-cf3360e2cb87",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '148b8f6c9e47e59f171e2cc938382ecc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--80b79234-7080-4854-95c6-801dcf366669",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '60f4e50985afa8c0b2437c78467fc11784416791cd8cacdb37542a3e14d79871']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2b117b14-fc71-4aa0-9251-53e7b78065be",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6204297b04970e0f7c843a28636b2e5e28213e93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0e8910a2-3e0d-4c8c-8e87-4c1a054778ef",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cca243be233cfa4c3f44c2035b5db135']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6e8a84e5-a8ed-4bbe-8432-277f3ef429f2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1a178c22b5e9a7e99c0c733ff9d8452b22a3418b3c137687c8407c309e79a714']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--850de0b3-451c-4dbe-b182-7283d3e1ae14",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ee0d1a3ca639971d130eff10c22350c77a4a062c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--873a1fb7-3b17-4862-a14e-28102e88e8dc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bc7e2c790deaecf69a69c042932e428b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--02dd2ca8-c8aa-4e83-927a-383ce585c8d0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd5d23fbad723009a6a6364ef28153ffc95190e269cf3749c3cf28128d4c89be1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f3436230-788a-4465-af99-e6bcc636baa7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8cec37385290b004e0b6514a44cb0bf7b7e64aac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--22672ef2-0ba7-40f3-81fe-de1d1f4f5b32",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '92a05da3047dd74826e09acc2692fe57']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--23c842b8-0461-4224-b2af-f74d938b0fd6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cfa438d2d1426c983134203329e30ac92a4c5f6170e1687dc287ecf67ef53404']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ded42c00-ecb8-4965-886d-35dc53929368",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '23442e4cee456a1571f65c75e0e53c388e194d7f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e6a3d55e-b8b3-4534-9a0d-fc7fb68da030",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '68cd61eefa0e6a7a6b36fb359bdd93ae']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--eb1ebfe9-7074-40a7-945c-83f919d5506f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b785b107632a3b8e9070a5a9a610202b46d916709f6b969b30c5d3375a2f38e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9b836723-67ca-4581-b478-d734242cc51e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '2f4e851d21c45e9b0a77a9cd9a0d5500a7740395']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3ea980d7-ee2c-4b57-a9ed-aaf7bfc89fcf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1ee3aa67213868df9b08d00f3bfca6b1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9ea91f3e-5220-42be-afdb-39bf9e5b36d4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5e5157e77089c4cfcfb2dfc82a574e465a943323e330dfe15316553d41f3d7eb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--725a55f7-ad2b-4e09-9fcd-22cd1996e853",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9f6a16d59f1159110caf32df1ad2bb6183d8bc49']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b406ff15-2a9a-486c-b75f-5bf616105a9c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2cdd85286c5531557f3f20a7cafa7291']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6ca02587-ff2f-4ba3-9137-6922dd599670",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8f6988e717e0334b33b7f4697c8ebbb5038c218994c8da7dc295986fe43b2b8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2ce6f4eb-497f-4d51-ac28-a537b47b3457",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ff3d21c97e9ca71157f12221ccf0788a9775ec92']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--980e1094-76e5-4c42-9311-0371e7526afd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ef61dcb3711fd43d1a7e40b6dbd7d361']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--97b17dfb-de9c-426c-becc-994135ca78a1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'feee319cff39fe40dd0e0651bdbb24e9701d7f5adc9eefbfbd4e7e465ebee7f1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--43536876-d663-4d3a-b1c5-701e40ccf990",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '62de7920de0dd9904b9af388ef5bb4c277a61051']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ff3e872a-68f9-433b-a15a-1a7c66b685a4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '780c1904904356bb7e4304f37bd98c7b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3b6f165e-0e84-4ffc-9d03-49ce070eb30a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c52f4d1cf3ff09b22cf2f4bef867456aa7426c00fcd19c38b66ee3adc7eba057']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b91cd547-410b-4d31-8023-527b013b09dd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c520096fc851bb0da060fb6cab274387ca8e8f88']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ec0267c9-f006-4a59-9b1e-1b1295f0c342",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7cefad54a4656d68d5662836d794b5bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0f96c3b9-8a03-4fab-ac7d-2a1c42b725fa",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7fcd2160127471fbd92e3dfd656d73eef31195f1fe5a1c77027bd2a961467883']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c554f2d9-2859-4bd1-861c-4f7a52201039",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '441a3f4e360996f53a0ca5bf7280c03771badb90']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a02c0c42-bfce-4541-8397-0d9d24281fa8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '58a5485bebda446634c538f20362f0e4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7d0ccae2-f14c-483c-a434-6d2dc875c139",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '976a843ee5a35e5015b5b2394e520e82403e6f81f877a4206bfe705bcb5e13e4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0a4d8a72-e1d3-4a23-bc97-a6fddd06c20d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9b1ed2cd261bc4b6f1ccf8441dbf3d5c936b63c4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--49c8dec2-a185-48b7-91b7-971770db6a95",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '21749bb7bdeac89843a60b0d032cf874']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--545bc456-c07a-4c45-ad85-3275a08f1547",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3bee8a4ee4efc157949587342ca73316eb9c95442cdb25dc349008c43dc64ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--22a91e1e-5340-4b0f-9d67-e62bad6ad00b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '827ad016a75e822dccd4d3c0c0cc178e7702a99b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c756e427-3ec7-4707-a5b2-e99dbeae7407",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '081b26d9ca74faae821e0b2eb2bb1fc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6882846b-f6b5-44f5-ae65-12eb49e9560d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4ae1e35dc83825dc81e886b7597f00781b184be4fa288a8aa7a3c0f62a526387']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5a6fc593-9f0f-4eb8-9e65-d868ea81ba7f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '28fb3ef8f16da864f44529f1fa09872af6b7e858']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ee1bef45-ffdf-4746-8c0d-cf27f31a415c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0ee9ea3b831677df1ccde2eaafacd165']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ddadf0c0-363c-4c6a-8128-6541823edd65",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '13397ce53d5bcc5339a9e5b83144eed11e051666abcf26ad393505cfd82ee9ea']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--37a7a581-0fe7-4c7c-a800-4c8faa7c0df2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6efd210c94ef5d49de0f705931b9e93b37e688fb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--20dc4a5d-3a4c-40ff-9d4a-7919215c2935",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '710cdda3bc6ff73c2399d0a718c9fbe8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c0325e48-8cb8-4ea3-97a9-e9723850fded",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8caa3a2f4c39992952cd2bb38bebadbbee5fb68114500e37832221d4e59aea30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--54f94f92-86bf-458d-9ac4-bc942109cf79",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09b49ee08641e1d18532a67acc09d98a1b708545']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--75063b23-14e9-4548-aaab-e458eeda9fab",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'dfd6d9d5d7074e3d822ee7002a2538b6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--11eee180-19ef-479b-b36b-d0b3056077a7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd70699e40511f4dd459420751e66a2564f050ab17b101ca9955423de2c579fa6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--88b177a9-c24c-41a7-89ec-fbbb6839e280",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '076b09d71c5c55e7ae6f044791142470799648bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--541a9bf4-71f9-4d76-86ae-677074d8979d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '64e273360b3f45a60cf99ad564954a19']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8101bb7f-248d-4215-a10e-49f228c1eeda",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '73ab06fce6b9746c1010a3c588c62069213d94134823b7527559a0f41c88d20d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1676458b-9529-4b79-8c98-7c80c5022fd3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ba553804706964473d3782468b1575548da0e211']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b68e19b3-41e5-4082-8dcf-4496d520254e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aec0f36dd1296689a740e43e3b51d734']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2fda61fb-7480-4dc6-ac15-e3987824c712",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c14327a7d2c7ab2d3edb5c0db2f87688c30f4f781c10b6017183f74403494c07']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2f5697dd-7d4c-4add-9464-0a8722431e69",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '621e2fbcddee9d4915c2bd4689234ed40475dfb3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a606b7bf-74f8-4cc1-b6dc-a1e1ee031c4b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c36d60abed084c6d61741b08ff6681df']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8db2d58d-85ee-4ee9-8d28-b9c36a4b27e9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a1eae49b5f732a7ceef30fa8aa1218c9c97e6436bfab5555ed79e4b29b0fda83']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--eefbd850-7a1c-4980-bbd3-fa4c0ecb1c35",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '23ba80af8dfb460b579b46309f4b7f0de53bbdd4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8fe28aed-1a08-4204-aaaf-11c6855d6ec2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b4ffce10c64d1107901318b43b012e9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--767fb9f0-8287-494d-a18b-90e9a0c64b46",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c8b3fa82fdd97f731851fa19611499b2c7a493cd689ac4d1796b3687d7fb6c82']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c24f896c-0378-487f-8f2a-fce16ca8609f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a047c5270762a05632b908c65beb14908bc4972f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2c35886b-8369-4ddd-b8c3-f3315e1091d3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2e6707641e23e18134e93e3c4f51c840']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cd087eb1-d439-40ed-9c14-cc05a4577848",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '71864e38545034655c934d46f6b50485cb3d605ad39a7c3889f7d3816440bf1c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5a0f0b21-42ef-49e5-b0f8-cf08d87b5086",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '275c5629439be1efa5f586b0bde9f447b85be829']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1f30ddbd-3237-4f95-9b33-9c5293ae2445",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5bcdf425169900ec224039b72c6ec5dc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cf46d973-4419-4a51-a9cc-8f7bb5861eec",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c65d9d6defebeacbf761ae61baee0386dd7aeb2bd8577611edfadfb765e6ca52']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--242ac95c-2680-4b78-ab78-adc80bff3e7c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '589c73842529a15fa9b77b6d4c09b4f519b16fc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ef7632b3-d2c3-45a3-a62b-f5698022a2d3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '89eab97e6862ab4c47d9f66f850e58ee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e4ff7f23-f636-4b8e-a0c7-b553ee18282e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '84058a01bb257a5c0f9a27f893ded585d349c9d87036d1a386fb8368cea2f545']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bb0914a7-a673-401d-bbdb-9107cd246612",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ab30ae8b0bf1f3986d9635ea6caddf3878b26fa1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f4d8cf52-94d0-49fd-bccf-43045aae1902",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56ac87bbab2e471bad63918f3b953745']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a352b1df-b573-48b0-b2b9-e3d9c4f5a6c5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'edc3fba72f9a485c43c1aa3cbe0c5752d8af2ec7bfecb48a46f467e549daac05']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3f0d6930-f60f-473a-8cbd-2a289b3ef272",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '89b07f90ec9db28d0c53423e6f64745da7e607cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2126fea7-6213-4628-97ef-9824ea265e3c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd54e2e633cea68716023e0e524325ffc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5b3a202d-d5e5-4c05-8b2c-c4442f9dd7c5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72dc79c35aac14f453674ac3b62c268843a9c614ae99da01879db04c1dd995f9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2b8bd650-eec5-463c-8a48-ea33d0e43daf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ec316bb9b9d0a09c2bd566e98d6507edb9932eec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--80ed6c96-bbec-4473-80cc-dfba41823ebe",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '97ff374ab1a7358eb362406baa0554c8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--339ea39a-4756-441b-9dae-9781a00bab7d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '010ce301d6ff509e111e9102ec7b883fd888f1510fe3bfba6d71986704dbcd28']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e1d3abab-9d6a-454e-9410-4a6e4d855f7d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '389c1d337548d2e3721466a3ca3fd54881cd5aee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d069b040-c0bc-47c6-8fbc-a7432cc196d4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '94bac050560b074bf7f48dcc282ab7ff']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d28c13ff-7f19-48cc-9da4-e35aee86d550",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b0d3aad477487039fbe9a33a66bd3654fb17f8af731c965d78977ebeb20392a8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--172da7e5-d8d4-4a68-866f-ae7d241e7657",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0ac7f04dd08120e93ea449b49eb8e557a5a2ef22']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e8d23658-73d1-47ef-adaa-e884dd9147f9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56eac983a8caa8c0037c6ba25e9a2d9f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c63737de-83db-4424-8789-78a104dd4a1b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fc609adef44b5c64de029b2b2cff22a6f36b6bdf9463c1bd320a522ed39de5d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--30329c6f-1424-4ed8-bf91-c3e2998c1195",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b7ec5d36ca702cc9690ac7279fd4fea28d8bd060']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8bb19b2b-a2aa-4955-a5bd-4d402a82f101",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5e000fd125d326782a4b3dbd8eb65cf2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f214f6e7-1ed6-4f33-9b2a-c2f9fde861e3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '602bb8e06f9ec55f1b4c78a77e4ec229548763076a69e6606a898c4dd9731ff4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e04fa231-cac6-4034-8706-e9d286a5da93",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a6e5539410661a8407ea022f4f55aa13ca674fa1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5ce6d703-95f2-4b30-ba7a-c24c9875ef72",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cc0bb7d434d786bf35447cf90e3b88df']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--17ffc0f9-13a3-4411-bcb5-4892ddcaf1ad",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5691fefbba82244c63e2166e246b1ef16d66b46ff1434e13815c8796177dc522']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7fd6764e-8cd4-474a-8948-d4e12c533b7c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '779946589786d2dfea06bd102be88df02426b491']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e30890a0-fe5f-4fab-8d7e-e57ce7514bf7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5cb4e4e218b97c09c885d157e83f7247']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3364987d-71d0-4930-91fa-7ec7f7fd58ae",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '150924668c8d7cd9899360eba12f13246538c50fbe7ef1ebf234ed7128c9936e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6df8601c-57b3-4abb-9acc-75e710a6ad5a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ca84583819c9723fe8d9fc69d8cee66687a180c7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ef02a81b-707c-499d-9485-15252ea7efcf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f7133f6037738c9c0ade22104349e8bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bc696816-5933-4df3-8da1-bcb613c38ff4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3d8a446c2da93d0c909caf9724ad452c66c944cf71f582a9b5002e9b2cc67793']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c9ec62dc-91c4-4c20-86f6-0410b1934869",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1ba03151aee8276e95666df59e36506a9136634d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9f790ed3-8ec5-40c0-9972-258a01aee412",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '875a81e316b0759f246bde12bf5be852']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e9560734-bb07-4791-ac32-e8a21c5176a3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'eda9ba61ad01810aa53eece81626e913c4058a3b3cbf65fded907528117db0ec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f8a5062f-2412-448a-b9c6-477ca028f58e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b683759f398e76e471879efb52df1738bf1fc307']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4fb23199-ae71-4728-ad64-416ee964fd1a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '365bf9ae89eebc67a34e09ad07ebf166']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1848bdeb-c57d-40e9-ae53-3985d4bd9967",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '314211107852b35dbf7d2abc54581aadfce1ddf79e1930bb44e37ea4af338541']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ca570512-b80a-4165-a6f9-8c4b9b7cfbe5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09a77488453f586ac03782a539225487c44c3a30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f930096c-0fe3-4e3e-a717-891b9de447ae",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4b8bb84127b0967d316e3d507a0f3b59']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--39a86461-7169-4a41-b051-832846255377",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f8addfa091021a34f8b16fac0687b685b72ff1cac87ba1392d6195ab42954d42']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--59504dd9-63ce-4f02-ba4a-b9d3601a729f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b6435e8a9356ef2dc0d31b491b78f8c870a4bbec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--93aebd11-d428-4817-8021-474bf9f7b010",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56fd59bf9f93ab512cfb0822e20dc157']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b7625409-23ef-43f9-9bd3-eb3381b5a6b2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f82c4673a15ff6c5806f54811c4e782b595a0a445476c3ccdbdc4cd200bfe36e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1d7fe606-8244-44c3-a2ae-dc318bfcec47",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '2f9a28719745d1f95818c424bef3bd202f4172e9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b55ddc55-5d2e-4ffe-8d81-ad98b13b84b7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'dae2dab64bdffe40c3730f7797c4c372']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d1f442f3-312f-4de3-b73f-c455f02dd424",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1c5f12e0c15adf930b31402e6586f3a05a0173237ea13adce2f01edde9748992']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6e6558e3-848c-44ec-acb8-cb59be2ce2de",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '80bf90a45be02815e6765e931063948bc563a8af']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cb7cf108-3fea-4039-b65f-f6884932b843",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7f1c1146f08a03ec811f443ac6decc15']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--93ddff1e-752d-42da-999f-d6b79f8f86fd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3e9a6f168c4f9f6ce6c6db3fee35218408ee0f79189f53e174f19a439e4036fb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0287c748-2a1c-40cd-be02-e63a31e949f0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '57a0d519db2354fb7f83f5243d4a9fbecf37f677']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2bf44c43-8d2b-4d95-bb10-bcb71647d695",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a05c9161177ee61f3e5aba75fc0a4970']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a74f9ce2-ba57-4de4-9374-5a0d67f7272a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '559266876f060621f9b910ec75404946121460375b6f7812da717896e96dec26']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e63672a1-723d-437e-a480-61f837064dbf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a14d7340ac6baf0b38eee37d7e3097d92a7e75e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4d3d6e25-fec8-44b9-b5eb-16d261c3b493",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5a724230ca622bdcdc0ba41e524821ca']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--72662ce0-2ff0-4efb-b6f0-4d2bebd2db5e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '90324a869541e0e67f0a3d4dcbdcdeefcaa4839edcb55ee163b7f26f80725278']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7eacc186-dc5c-4ea0-834e-115707abba54",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c6993c06bb4721a8637390b282e30d5a1c91a22f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4e76f445-d0d8-4bb4-9e75-4ef6316a72eb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7421ef518702479d9b1a4b82318a1095']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0af3a9dc-f58f-4fd7-b870-6e4a64f3747e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b800ba5adfc26f20b4049dba2442be73347e999a224716c7ecb5271e482e0a4d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--70a6ffdf-59e3-435e-a869-768cccda7522",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f771f3b68376fa211e590a7f5cb65f7cbab20187']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9642727a-0b67-4e7a-b0f3-11611972fb82",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd7697f8af52b42e2fb59a350886f02a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--875150b9-6ca6-4a50-a895-427138205ca6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0418ecb096bdb3360694780a76838cd333900ebb26a168e3a95225e6579ea20e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--29fda4bd-e3e6-4769-847b-f89c992cbbe6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '34da42515658486c097b4a16c8e7ab6d3fd14020']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--79381b8b-9ed6-4179-ac9a-6a39899bafd5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9ed0d182100447ad46b38f8ceef612f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--88b770da-b41c-412f-ad7a-dae05241cdb7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '656c897b39d7867bd4d38696100a09e379b06ab5e5f6842c1329f6bb83e70161']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5317b2bb-7b6b-4614-b64b-0c6ff0f79cd1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4dbdb482e6f4882ed8d31e1362e84fc104b397d2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--97b79e14-79b3-4d7c-a6a1-241aad37bad9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7f2aad2ad7bced650d9eb19dc80502c9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--53919ac0-9833-4ca0-b868-96ba1fdcda54",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e378812f4347b6ec7a517d9c06dc1cd608322033743ec075afe26857bb65c6b0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--105fc72d-74ce-4c24-8b3d-4dab9b42dfe5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5ef6c7729e2f6d445fd3fd72f93ec637a5c32789']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c0f8a7a0-1fd4-45aa-82a9-5664ef1565bf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '40e118e4ed768f32da3bd4737a5fc60b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1f0ee0be-4438-4591-91ad-b61b27a995e7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7a136aff189f79dee342378d9d011ef35b639840148989670cd9ed3aaa404cdd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aec1ebd9-c894-40ac-a6a2-d84477f9316e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '58611fe7ab6aa2e2550c40a059c9f11e88b04252']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2da778b4-de79-4a9a-94a4-da33b031b8d8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '6f653987ef4837ab20bd0b2d2f609ab0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3c45ac45-4bbb-4212-8cdb-50e10c05f53c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a9e25fbb95253412de09bc1e4323602afbf5077aca71f861cbc7ad74581511a2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c541b6ff-72c4-4954-94b6-10ac201fcd9e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b149a8009f1c4e845778370d25f2df980adea362']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e3b5ab8a-1e78-4094-b71e-fbf7243c13d2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8aa3c6e9cdb8724088c67c414691b66e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--480ebd16-4ceb-472a-9e5b-df4d13a3af5c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a801ca60fe94c8182274cbea1f5d3666d0b9aada7feffe3d9a613eb1c3a6f949']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--21f032ff-0e2c-4460-8f3b-5dd3e1bce252",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ae4ca2e5a431c67a427a36823aeeebd89f3ed0cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a11506c9-9db3-4cb5-8c66-b3ed9a15544e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e3bd52648f653b38d75d325f2c205130']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--40e6017b-2037-404d-8bce-fe3288be47cf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '79deeb5af79f9a48cbbbb37400b940dc1e709230d0b176669bc1d095c4bedca7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0276df8e-d6c9-4fec-a9a5-4d4bdd9e6e08",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '26f87e87c78f075ff69aa7de4f6c50f97f499ab7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d29ce81c-38fa-4507-8427-a9685bbc32d1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4bd8de4ce17067db858d63997315aee3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--34fb2ee5-288e-40d7-8ce8-8ee828738863",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f2f6dfc7fc3ff1170a80d661c1dbc18dbdfa456c1327ac475a7b21a38ec014be']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a432c674-bb4a-4ba3-bf3d-39791cd64e78",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ee52c9416e9da9a1f67785bada3c9f4dae89d1e3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1d4897b1-6f0a-4195-856a-277cd801a016",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '983ea03599f2371d3aa4b561fbdb9d35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2b8bbc63-0d42-4a3a-99be-d17b78ae6a6a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1b72081c4422785d8c6c016b10bdd7545e5fc6f1ff73277b0366e9b40e624616']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e299808e-9148-4f80-961e-809f42495fb1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fd9516d2c5493009009eedc0e98e345956516d1d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2e928354-328b-4d95-af5c-4323e113cfe3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '19e932c289b936f407cd93dc4162eec4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--86cbdbb1-abcd-497c-8cbc-796ac5c20267",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fff8c7da09ace612e203a7d91b24e56a9e1715d5bfe6a7a4466adff284009a1e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e8dca38d-e6cb-4650-a637-d9c5adaa15c2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '90342657a424fcffa836dfa5136eb362f49fdfb6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e56e32de-7a16-471f-aab5-9bc5c65b063c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5527d16136944bc3795bc65bcbbe65f3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--77b8f36a-1fb3-404c-902c-5973d365e1e6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '42dc1f9417fb067c3b96622ccf6e8c80c9d07202cc28f3c4d460d5bdc6ff249f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--875b4199-a303-4065-902a-929b417cb0c6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd228b700a6f4542a63337ab0899bd7e90982c30e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cfd11544-6d2c-4219-9e8f-684e0aa2e527",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f855633c69c3095b20a99bd12d023271']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--adf4d5bc-05bc-4615-81aa-abbbb39ab28b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7927f3a35d87250253d8abc021d44cc496d2185f376f0d33b0365a68ba81e636']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ff83476d-1432-483f-a55a-e3d5ec1afa19",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5004f0d0410666e923212e941f646777b91958b0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7b8937c4-ca25-4c30-af1b-1c0bfc62b592",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '27f45f64f69d31839a6ec82185b5e030']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--51da3185-6f29-405b-bcb0-26ee50a4b817",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5ec8cd3180a2576b92d53085ff5e3dcf4e3dccaf2154b59879969ef8011fd1c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7f44fbed-6a12-4132-af17-5b7e2dc4f19f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4edb69adbc1ebc884aa65cd42e1187f9223de3d3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9ecf3477-dc1a-40f8-b637-1d8b54a6ca00",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0bb14e2cbce99ac845c62bea9c5d62ba']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c2cfa08e-b99d-48b6-bc38-05b343c1f925",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4f9f7f9b2a3ee884f4aa08c066a458a52f175a78b7748ef4a751543213b92d29']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a3bad676-5edc-49e8-8eb1-d553537ac55d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '33aa87925aaafa5c97df0c4334b3e70b5ce43552']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--52d1b437-94ba-4450-ba9f-21d3afaeb430",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c170a9961560e4c96215a06f75985fc8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--75002a42-c6f3-4e80-846a-7e4d4dbd43e3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '598bab73e4e2e9a09da64a16c807fea62bac20ec206384194478fcaf9eac1b14']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c2ec690a-c420-4888-bda6-a2ca6a6d8ed9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'edc03b57e86aab5f869533ce2487f6918e26d5fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--855a3c52-fccf-4764-84c3-6b1b5200601f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f12ed5b550d6856ccb501f9ad65f956b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ede52221-12ea-449f-9f9c-16b0fbec1c78",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a72dc5010dc21c3bc9075c74fc7b87f0f89cfbeb1b1c4cdab06db4262d84969d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aa3856df-fd6a-4729-bc40-83b364cd4c73",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fb9fddb2b74e62d2e949520de23d6a2a2a16e576']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--15d7503d-f778-4db4-85f7-f47645d74149",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7ebc36666f11c4285ee68501dc3c1b5a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f01fb52d-d801-4450-b326-58eac552df7d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '71fe815f897877e69e4a37844a6d2feb40fdecaed1dd55b07472234e87e22767']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b69fc1db-3424-4a01-bf50-f89444846e74",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f19e73120166b637ee7a941540979efaa4a284b5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1d448d85-9d75-4925-ae41-426b468fa9c8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c89f6c16e581e975a12ec19191a766d1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--db685191-4ea5-40a6-b597-0748ff4589b4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '654e7dd64ab4ef04ea22f63fb0497346fb8d484a488be428d78d32a17654604d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aa3b285f-082e-4c86-82e1-f8ac1afbaed6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ab57daff9d93e71bcdf7f4b356089d3ae681602b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f3fcbbc3-c707-40ab-aa67-df7d53d1a4c4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b0d0828a54cd184137de8d0deb698119']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e7b3d13f-4535-4d1f-bf22-1d90faf743f1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6e678dc4d933b186557f671913fb2fada37f342d5007dac0b745ca718d2e7405']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2b371e4c-b291-4e5b-80ba-1e6b8c3b9120",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b0e59fc1d41f66919fc25e454d26d9fd004e03bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--98d103e3-827c-4ce0-b579-7517419c8eae",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '768ee422a113dc1ae0310f6bc4d7c66d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c3dc119b-3299-4f71-8595-e23bfe854cf6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cba8e646e951dbfde33daddc1ad6429814dad1ae1786c886948ce9ed7029f487']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--570633df-1616-40ae-be28-f753ff9e7ec6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '41b844cd42208eab05e203b5e22712eaf568d133']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9701277c-eabf-4c27-aa2b-1ce2ccb7bb7e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a4d16a3874aaf01d69c27032cb8988c3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f07709ca-4572-4094-b393-06a985761975",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b15b2acbe02d7b0649b41d1fe7e0cd008761cba28d20c5d9fa9c17e3a430d0eb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--dbe24604-12f5-45d9-87aa-6d4d7905eeb9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b70d21894318a95717db2c5113be455ccd4c72e0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ec668d4f-842f-40ab-8f39-5cb2aa4026b2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '168b06ee1219ada0afe184f9a70d12a0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0510a852-5fab-4c43-acb3-29ab1a0e8c1f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cc87e067021f8b419cc73863d26bd54e25b6f4c8149d6d331ba50e54aea917ad']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--da2d079f-ab1d-49de-bf59-6f7ba63915e4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd981a1a553729bc6ad875d57825dda17b226c385']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c7c046fb-5ed9-4ba5-8736-f1ea91bad92d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '32fcb852290c66212c9f5377313b3c54']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ecfe82ad-c144-464a-aaa5-af2a0e2173bd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0ca7fafd58f8ddca6dd182790b1a634205f45bac5c4a3ff4cecc3473d0c47726']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e1045d30-ff91-4f4c-a303-67d8d900088c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '97400f2cd6873187109fb9a4be4cc199067e8e4b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--77c533a4-a15f-43a1-96e6-cfad25b2fa14",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '251de11b2d47bab208b578db6f4aa38f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8a7aa164-90e8-40f9-8078-8c1b620754e1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a9af1d410b796a7d89050bb8189048260564a1ff0b94db25d0f465ea18b1c02b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--11c79e22-3158-4ce9-8193-d58181b443b2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b904f58d5bfd82d0778bdc9911f3b2193398e7cc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5e8cc942-8f82-4584-b09f-7b9893baa18d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2911e7d0f7a9ee343532865de81b1cc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7a411fae-858b-4a99-aebe-b84db6c3d937",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9db48e1cb712104830461c062d0a93f8e3b4043c0ab8b2dc0e1f5599827f4e21']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4560ac6f-7b61-4b04-9707-0d4bb01ee7c9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5ab36b7bb8b782cdc3a4670adf3afa2dabc978b8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--dcdd09fd-9fcb-4f64-9cc9-074a4879c406",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b8bb19a432127cae3680ab46140c4789']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0619bde4-def6-4267-a658-d1fde8051738",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5a45524e9ad739585c3851b32f660d777624c811d0b293b3474fa2568e8022d4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--63858b92-361b-4c9e-8a78-20d946023456",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bab514067c72f51786054136d2e6ab927c62b275']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--434d7821-38d8-45b0-8c35-27ccfc794b41",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2c367d915ca37e237df16d8548151a8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3ff0d178-e4a1-4e60-84f1-e0020a209502",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b40d0ed8d1b7bbd0d52990ccbb7e927777d9854640c6c4b0adc683d55a965758']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--05c9c071-afea-4a69-adb1-573346abeee8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8a0fa4074403caeef809113ba7c84eba4404ed9c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1bf0b9d6-545a-4eae-819b-74de37a4ed8f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4b5d19d8a0bc70b2165144cb9be227e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--75d207ae-b98f-42ef-9bba-ffe000fac4e4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8306c3a000636a21275774fcc17cd0bf75d1959bd9ea6bdb272666fda8494649']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d4a5cf97-e21f-4c64-8753-92b828c3e360",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09920b2f0d20df022da507ab7b334392f7380cb4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--122186e3-274a-40ae-8a08-5ea6101a3bd1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5bad3163f9caf8686c7b9e43934a696f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--06d7d795-48b1-47ff-b0a7-c50a4f410695",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '988246ec5ee40470dd1c6661f7509d43dfa3debadd66ae4722a091935ecb56d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3ab4df37-56ef-4b8a-9cb6-eaf41aa8a7dd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7b2507e7e06044fe193b811b7c6ee3768652fc67']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--430f22c1-f6d7-4d6c-92ed-9df528b654d1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c219ac463ef4bb377b0b5e7ec19ce976']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--59defdab-df49-480a-98f6-bbb34a379c62",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a5948e46db292b61d4c4032a7c7af15453477dd6ce4453daa4a6753c7763d873']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8cae9e5f-e6f4-4f29-aae6-4c1e15aae341",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a56a1b3f473346f0395c0de433938dbf4fa25a11']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4f61fb5f-8610-4a4e-bf9f-59c663033843",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e1e36fa0c482c71fd777be049272f7d2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--dbb2674d-0568-4546-88bf-d6b8e54a1a99",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e32cfd415d5aee289a62a02b28b7815346cd150d70c0e1f95bb92ecf26a855de']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9b86b42a-d056-400f-a4f0-31e07f4dc523",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ded04333c0eeb0f7978da4f298c191ecf42f98c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9afea296-2239-4c67-b513-6dce2c9ec17d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2377d5fa8c47ed262d49575e2e612433']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1c6fe5b6-d730-44b5-afbf-7deed98b9728",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b524abb464b30366afff9b01da259432f76fef62a7b9d128284e289e76b3da16']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ea0513e6-8881-4c6c-a7a3-ea990f0c739f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f3c3f9e3139efb822e7b574898e95c38498462c0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b53afb3e-ecbb-498e-9056-11128faad38f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '448975cbf086c450d1ac6285f1b57e95']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--179a384f-8996-4eff-9c61-f082ff542575",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b606cad7024a165b899e3d2ae9625e6d0f207928eb2838a6c4c8b26ddd583bb8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ce1ba968-5cdb-43e1-8341-298de5b4adc5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e4c874697e71bb3b3b7fa0d5142f5c28df786313']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f74b1623-7220-498d-bfa8-a67b97aed1fb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a835bd1a588d516e8d9b12c7b85d54de']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5f1e2284-3284-4aa7-b47d-bd12f43595ec",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '31e9433eccf1c150462b705af11eff50587d25526225d0c4ba07312af0c81969']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9ffb2b95-ab5a-4fee-aa6e-2e69b5e28bc7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4357e25f04f902a67604b8b9a6a122a9d3ca0357']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ef5522cd-c209-4506-9f28-7bfd28854f96",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '014402d32082497d9fae6b339f358401']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7b53a42b-436a-4996-9157-16326ac2d6b8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '941ceeb2cbe1969dc41059e0766b5d6df687e8e8d96e31efea71699686ab6b9e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ada32362-b07f-4c1b-8038-6ef8214fd40b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ea072de4b781749a694628da0758c934ce9cb0a4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--57b1ef25-a25a-4766-bf71-91734f529d2d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f413e8519a67390e4618fb3653250572']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d9aeaf5a-f9c0-413b-b87a-b2de6ca73693",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'adca333d2cee959c9323327ec8b3abd1193f34c520b80e4f699b49f70e14971c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0575baf0-e53f-436d-805f-fdc4cfc5618b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '87c6760c13c17e35d90a203a2acacfdf2ada0ed2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--99e6fcc6-d1bd-4a75-8457-939aa7215879",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8a19326b0ecbad83058b0ab803bad254']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--12edecdf-e9e8-44e1-a915-1d30e58e45bf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2c72175f96c651eea3d3411efacf73e0fb3e7543451b73f5e2521f47be67f006']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8c1a3e39-046a-48f4-882c-2cb1134cd217",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f80dbd487b738df05fe27b8d5238cbd3e429dd97']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aa40b44e-0328-43bb-b9c0-3e51d8659acd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5169e6cf3d06429b94bafd835b5e2791']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--009c1052-ce39-4222-8cbd-3bae1ec00719",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ec0e0c640f83d91fc50d657870f4b1d07bff0300ad6ba841bc7a211160ca79bf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--42ee98e5-276c-42d8-a817-3842fc2c8b35",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ac63f0f2ccfd7ef77b1369130e2d4316c306b4d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--76ff923f-5db3-4bb8-8023-d4940660217b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b1c1f4f3e9189ca1763e8b2ca3bbfdfa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--904f338e-d688-4ba1-9741-dd01afda9d77",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cedaf3f2bdbd936ca276b636bb119136d67e0e2fa74614442c95bdbae6c50585']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3a6d13b0-18e4-483c-aac6-ee2f2377d469",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c7d3c7b4ff167ccc0957f5659c5591f2ed43e70a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b2f30841-b47f-4363-adb6-cfc6385aff51",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '37b5ee810eee08eb46da2d4d1710262f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--30872f7b-4fca-4cd9-a0e9-3aae02a936a4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f3fc6d8ed53b5be3be601281848d26134fa85ba4737ab69b13a50a3a8dd523cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--33806120-6506-48b3-b5a8-b4183ebbc6d8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0ad4455380b6c2224bf6d0d5112653db2e05ab28']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--51970a31-971d-4634-a1f4-8d0ddc8133b8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'fa6d890c0780e5bb42550ac52e46e94d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4b73a992-9fb3-491c-868b-aca1cb6bc1f2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3b471511630e5ae364c28de07dae041a5b44a040f49e15735afa509e44801863']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2c78ba3e-3825-447c-a931-9607f9694be7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7c1db3fff72b3c8180fe0eedd092328e29b61588']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--13e955c1-9661-44be-9044-210ad97a6ff6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '432f4e8794a2ea8a64e4c75ea80b790e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--70022e4e-b60c-49db-a49a-4369c9d64ed8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd94b971cecd864fe6153ebe94a775157f3cdb69e8ad802eb78cfc0136737c0f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e4e3c9b6-9636-416f-b94b-d72d4a933684",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1f78800e17ecf9535eb695b5665f1da4258be70b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bc194aad-6e57-41f0-8ef4-9ab550081faf",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5cd44e29316435cda62790801ec4f473']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aaa6d891-77fe-485d-80f1-4be9815860b0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2b5560f11b24de4fac1b0998cfe80138c2a4f87bb15f6eba6f7f58a5cf1f8622']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3b38c66f-e2ef-486b-beab-efc9f812a3e6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '50651dbc0af0ff5f1623c468fd4ed4eeb3f2460d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--87f1c0b5-100c-4a4c-a2b9-4214cc3f47e3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3b726e15b2e161a5acadb1a1bce87cb9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cc134346-bbd0-4e4a-be49-2cb5612b0283",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '60562a923d1fb595d6e144a0957bc5f9fda0d3f105c316ab5e7d7cd27ff0c27f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--46290018-d04d-496b-b9ed-1da6a646ab0e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5fe9dad18883d1dc64dacb7aa8dd7988ca7b52bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a67097c3-e6d2-41b0-a87e-74a545a8df13",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '309ad3a96832730545d1ff1f4fdd8de2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--00dd8263-2b74-43e9-a5f1-621ce6e6b94a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0a5c0224092468a4669f04721e291e3e89653d1ecf436c5c4dd7f1f8df4d0ff7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--866d8ae6-fe78-469c-999e-886cb9900cda",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1b8f53c2ee42fff1f333223e82d3e538792b9778']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--de8eadab-ea05-4e06-b23d-b922b9407a34",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '29d51c29dd3f0811d403c329053a2f35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f69badfe-a4a3-4183-af93-4247fe8db7fa",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f1ab31f87585c824381ecd5411441bb1c755d81dd0f42bc08fbb061b9066fba0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--19b96a5d-4b3c-4f38-bcb5-a0b1e297ac53",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6a951c1da9080886fb931d01711b225c1368e6e6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--49035831-30cd-4c72-870f-dec69207ca93",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1fc10a99ce2652ba0ec7bed0f8f05c2c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--452f4b9b-1516-45a9-9bb9-bbc51861d011",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f08e6bc6c3a6771f697d4f724bb238f837f61d988c29a2d77dd73cd36a4a38b7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2706547b-0ae0-48ab-a099-c2456dbe38a6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '333a5d4082808206eeedd309e02d88e720587e4f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8ee6c7dd-614a-4e86-a078-cc9c6b8b1af1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aee7029335a4df8ac44d3587e41c21dc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4867c6e3-e78a-427f-ab12-45307aa535e4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3f85279eee498578935e7f51881f8411be5ac7ba45f2334699230cd0b9d60032']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--60f8bffa-cf22-4e1c-ad41-099f872ff68d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e19a240f49e953a8ec9a7efc3b0e47cc8ecb07c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6391447a-a3dd-4730-b662-221f32eaf0cc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '60b9933665169020a3565781e4058e08']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--871662f3-0bf4-4e65-8799-10436e3af35f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '200c0623f75433c1e2821d930e6f3e072c5e06f2bd1770551595acc3b170febf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d62e320e-bfe1-43b9-b7e3-fc4eb5f128c1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f039f975acec4b8b60b7619cc75e0b87d809315c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0dfa527b-5edd-4966-80c9-543eec828796",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '713c269faa5f650710997004d3be6971']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b1ac84f8-4223-4591-b7ac-e7f5d4222a20",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6739dd4361c559fd9099dfc967b06eb5bac95ee8693986ac29c7b368dc7cff08']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6fc167c4-4c0a-4935-a01a-9144db97787d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'dd6ac4da70c52dc6aad69590c2335925859c838b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--db454d16-9c3c-4d98-80a8-940e72c8afbb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '48d638a3194f8740d9f05faf62670ff9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9d69995e-8f58-48e2-9371-65636c3f08c6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fb3b9464e866b35b3d7a3b506f967b32e1c2015e0703780c89993ce6d50a0ea6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--eef393c3-93c9-4e99-9882-c42f6514dcc3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1351e784ebdffacf0fd143c07581136e94ca2319']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5da5a052-70b2-4de9-8c86-4f459244e4c0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9bce542aa3fdd21c63e18d453ae8039d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e4db6170-1fab-4c3f-b2b5-7f8f06f877ac",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '957fcc2d137e9164635831dd0ab8bca8079ec8b1a4c2eb6e8ac254c5732b025b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--fcd05303-1cfb-4b0c-b99b-5cf6f115effa",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a3a7545333638ec13ad33af6c4ec32a2d4f56c5d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0957f302-6642-4913-98ad-97da94aec4ad",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '33f2a0070170ab861e92435114db52d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0f3da3cc-2307-4298-9745-4fb0ec1d5b7f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'bfb2ac272617e4af5ddf176bb4bffcc090e47b1208f4285a7108d6a59ec51837']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--09de70b1-d76d-49f3-96b6-a333c900c2fd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4437315b462fce721d16edbe77362b0e634aa559']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8e982c16-4c02-4295-bd84-99f10dae27cc",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aaf26a0477841b45969fdce35bd2e1e1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3bfd242c-07c0-4a49-ad16-eb80c22cab32",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd9c55606c757e78940c3a22fc25ae12ed93a68c9f88983e58cd4795047504246']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c138973c-ed69-478a-98f2-1a3a362bc28c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e113e2904aaae7aa5c2438fea757846cad8a7e9b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8a9155bf-29e0-4f96-8862-a29c16c80f9c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '32d9d4da5e7b99e2d70200d14003e830']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--68f37c46-68f8-41b6-920d-0f94150890e0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a61c9ae6ac4149619f058a09b83e7ba16bf6bf2492201fa299c25495ef01ba30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--00c2cca4-5332-4613-930e-b1e1ad3e0cb3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '83852d86836e9d2193067919815418972e5cc03a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--602786c3-b78b-4dd6-b5be-b4ac65af38c3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '738cf6db1f93006967ed1aeef87c6ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d7feba5b-7256-4545-904e-0379d4a6662c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5f6bc6573d006609d1f0b5c3d051dc6eb5b30dbc60c4e2e7c7b6826434c6a59b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e6abab13-0f40-48ef-8692-47c634ac2322",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd89f0d3e65532a41615d0ee21f2b2379eb0b27d5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--17a82fe1-7b6a-47ea-8057-aa8adbb9e733",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f713c1e740d67292db2d96c7755a63bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--681d722a-bff3-41e0-92d1-3f18445818b8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9f3673b51a622dbe8ea5f92ad37ff12ed0a03ff5c30a9ca20575dca08c624fa3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2c6ac715-2078-42b4-a089-527026e44519",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0540e5eacd37ea3285f8a239dd72e3e7e4faf33e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e9c2a447-f613-4ee3-8208-0e12a4b21948",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b58e692d0558ba1b9cfcdda2775c7fac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a4705d07-1580-45c9-841d-e53ab40080f8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ad55c2dcf7e3373ea074061d119c891b34e4364cd7f5f679b475b5ec3371592e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--de17361a-7915-4f58-83f4-b47d90ddfc0e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd2cc4bf197b9d408bcec69252725bbcdb516308c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--231eeafb-599b-4be9-bab3-823874531141",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '63de9e55e07f81e6d38eb859483b103d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--af2c61a1-58ec-412f-94b3-13e0dd006e1e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6d22dbb5285391be5dcce7a2aed9f14b7ef57de90fd5b02d4bd7ba07d4a5d455']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5b652cbd-a7a2-4e02-9eb0-14e01c49d228",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9cfa6d066024a458e133fb9cfbafbdfa0b1c64f9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--72c771ba-1130-4f4b-b7ff-df2ea95da93c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0df77ac381a54c34bf3f12d13f516be1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--858aaa64-9a86-4cb3-9e97-b78c87e94731",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5e75e0babe92f1a7691a43641fadb7be84d4d273b8bcc6cce5dfeb5523a6b709']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--81fd81ac-5b71-415c-9a5d-897125ec3ff6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '13b20e7945eb7342540b5fab2eb2f03063518239']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--261f7dd9-308c-48b0-a96d-5da2ce67da15",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1c5764dd71b9109dbbcd83201be2ceae']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3bb4df72-ed86-414c-a7e8-f66cef813ae1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'abbac3dda22f825197dd65b8c1076c5ab8d7ecaa2ce2821b242f63154eafce3a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e060333d-66ad-406d-8745-21107b0223cb",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f9860169568558df2eb06b9a7ab9d0a89f45cd44']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9a8e73ab-b4dd-4d72-889a-efa8849889d6",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a226d93f726bdaf119088e62b9b70989']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e3ee841c-7020-454e-a12b-01ba8c739616",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b20b198d9e3af27ecac4a83b66234cae4eef6db0c1192b6f9ba9ca946033034b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--af63a52c-9573-4b05-8b54-72424eec6d97",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'df7e96430c086efef38810de0ce981f7c4b5bd3a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1140b177-79b3-4a8f-8e79-23576dad0908",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f27de7b44ae44588445238ef441c9d99']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--98bf836e-de81-43db-8a6f-00f36f1749e0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '14844c483d486348f598f31956aa13e50f3fa85320287d91815be3a611c8f1a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bc116938-e8bb-4a29-9620-37e30410ac6d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3320916ed703343c70ba0166595936eb588a12b8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--fe810afd-7789-4e5f-9317-355df42f0e04",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '41ff8be81c58eb94b5f59e5f91ba0eec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--52406ab4-54f1-4e20-ab55-841ea126de34",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8d9695d0af6c38b8552ab3182f41f7ae96dc6cd90e107ee7ce9c132ac9394b61']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--679576c5-58a5-44d0-8285-f9b3c4f1ed25",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8697fca8fb4c27f64f42c393e527165e9604ae4e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--663b6258-f195-4b02-a974-65cfd10f04d1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5a053eb4538a0553889651ea7b54f590']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7f85ec8d-5bad-4d6c-b145-e34f3f7b2f61",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '595e4dc95b391a0566bc8c9d32d352c205d0f8ae19d3842f6d914f0b696f98e2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--64710abf-28f8-4946-bcf3-2b02d78c9703",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '33da4a93916af6034463aadbda97ad18671d45e1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--9f9854bb-8783-4751-b885-e985b6dbc04e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9e12941d5c990122fdee6b24fc3a859a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ee43d838-04d3-441b-aeda-ff289c88cd55",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6f788920ac2df748947f767a1e9b5ee3a5c9f4d073fd07792c9ebfc4eaf45ca9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--66f3eb29-c0d5-4361-8b02-4b58a0674f11",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '45179e1b07cb96a8c31443ffa1a7b3f0a6c4de01']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1f95533e-2a67-4b80-a06d-737547dd2265",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c2979839d2dfee2d26b32510d4c35bc2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b26cb914-fbb7-4e51-bfeb-86ee2c6e1bc2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ea2244395a2f750564fc26d64b4cd50c2afd779b4404497564e0fe13a255b707']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8498c9b1-da4e-48f8-9c15-eaa73ccebd14",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '956397670afa8921a29110f9926ba118b0a9b5fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2d7deb83-efc2-4eeb-89b7-384ef74fce34",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7bde415017793b4fc3b16caa0f640967']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--57a3d48c-7ad4-4e80-b914-ab6cd62912e0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '129c045ef072adab8457f6c90a57ce947f2792a09c02b451d416f988994869bf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--811d6716-90a7-48fd-b0e4-b7f110369c76",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1a4ad7a57276dfd24d31fe5cebd7385e8269f5f7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--866d9f54-0bce-4abc-bd5e-7fecd6fbff0c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '6acf6107069bae8a0b808fc1061737e9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bfbcd39c-2996-499a-bae7-7b1e0fc99c62",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3a7373204ccd08adbd8349c8356cae9691f8817267c66de0b9959b979a77bdc0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c34a055e-7566-419e-884c-11f7be16fd94",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6d351044dbdad9b5a922e174abc6454ff3de3ed3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8189dcb3-45c4-4a18-84f2-4cf3e1272608",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '07386293b3ab69dc09ff7382b75c6f4f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6c8f81fb-98b4-4d0e-9ddb-acb0b9f13990",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3476d4368a0e82f27eed752c2ce45dab9ceaf33c7655dd640239d4b54c0137d7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--74effc6d-397d-46cc-acee-7dacba5d5ec1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0170d2b3ce35883358692c364b7b89e712356aa2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c2cdf2ea-651a-4a52-976b-83f091eab390",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '798d889d9d01179187187b93dff893fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b34b7034-d70a-4928-ba7a-50432438773d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '77d97dd461b4357a9d9c1e96af007e7a3f090925e55aebe11bbbd97856611a12']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--508e7509-1476-41b9-beb2-bdf960f10700",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '74939abd0764c8c36ca4856940fc42508f320f1d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d2a492e5-8f91-4ca8-a289-123744fd4a10",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '88f9a2235d3162aa2ce322320025e207']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0593ba8d-f31a-4336-8304-0a4d3ca24e8a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6b48e56098976fc5b5eaaf5f43f5c9a39295095e352cbd784b00b55eafa5d355']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3952e1cf-727d-4f30-a303-266452cd7322",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0fc9171b5404816c5753080b78f2af31ba023611']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4d814855-188a-46a9-9ae4-050d64185995",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ec9e2fcff1499551a0081ea2a8970684']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--72bcdd18-21af-4a45-88ff-8f8b9d020791",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'eefc30488c1c086f1e1edbf8b492875c2b19a56cebb623d163d1545c9c504f9c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c41b749b-47c1-47ac-88b9-fd9b7c6c8308",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5f2c564a015bbcbb062d76cf4ca019112d3b1a50']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--823c2734-6d5c-41fe-b9b7-35e524709c32",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3c8fa6759db3772f109b6e9860fcdc93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a412333d-f32d-4206-88ee-49a0908795b5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9581e36c5a55faae049a89fcfa584cde4fa7294b156e31de3e1a33035f4df3a4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--256f7ebc-3772-4599-b230-fd652af3c987",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '22e1893d9da4fe32aa5abe60f14dad6e52c45095']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5b788308-e351-49d6-8ca9-ef329224b169",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3febb273f42e81c95c6611981b696822']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bd0deac8-2070-4fc0-b403-7563e4bdb2e5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1e4f59d5541dbcaa4cfeda6943294dc40f425ae3f24764cd3c7d643ff2a7bfb0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--60ba2a87-53e9-43bb-a634-8aee0911f7e9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0607db646e4e2f5cd3caa1f833515af1783a6c8f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3f11c16c-1f28-47bb-bbfe-50473b13e5da",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ed3158a7e3072f6da8dcbee7e535c518']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cd7ba55a-02cc-4df5-84f8-28bbf6fd3d36",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '22c586057af0f0d615a1753b68936763d36e682bc094ea4c805845f612ba591b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--880fc9af-e95d-4e7d-9d33-3fb7e88b3e37",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd85570ec70c1c3453eb1d4f5aa330cc050ea92f9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--758b2531-3e6c-41a2-86a1-3a74015e13a5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ba6fd88683895e4e4a4aa32014ee93f6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8508b97c-917d-4393-9d6b-feaa9dec7fe1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3e1ed9e5fc7ecaa8a01b6fd160cab39d251390a21fb7f6bb98e070efe1506617']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6916fd07-8b0d-407e-9c82-5afc501fdcb2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5cb07296bda8758a6ad52abf8cbea611ffbfd390']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--98c62622-27a6-4e82-a7d1-9ad8c867b20f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2b6782453501a0f89aa9c697f25aaee8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4c650d97-60c1-4d15-a4d8-fa15403f67d4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ced4344df5150b592709e8758e822c06644cfe8cad26c28d50667fff35f3fd08']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d95ea459-a464-4c38-8569-f74a69ab73df",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '533df8b545fb8e68dd8e14def5d6948d1a2c26cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--3eae7f78-2315-420b-b294-ada965e80f85",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8aaaadb7d6a179226e462a9c8004e80e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cf6150b8-75fd-4845-abf0-0083b0f9ad06",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1a855cef1bb454e7313dba60885e16fa8cb3dced1e38b8ad59ad5429c4e12493']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--99f141d3-5296-4966-9c59-6de310cab38b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '685c4287e74a9704d422ee577b7acb0748119f56']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--64d59390-188e-4c75-a10a-38d50c53df60",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2a6ad4fb3a29795ec7b2f02304464b36']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e24c5a90-9f9f-4799-801e-25e8e14c1542",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '01b3cd088328aa2d87f6b3c435fef56b8a6033f78767a680d416f88c3e3ddae7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f8bdf86e-6885-4636-861a-1878e759cc8b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6081a7794e1fb5349ac25fbba1bb80e4df857c35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8e672e5a-83f0-40e3-a0d2-512fad0097c8",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '375e36fa33888f4d48a8d40809165277']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--656c2033-2334-4fec-96ac-441622378112",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c3baa6e1a9ca0c79c35a53cfb5cc4bb76e45ed623841bd359d7241a8d82c5a54']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--16f3c7ee-6dad-4631-a58c-56e0d1c93452",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f67d3e3c5892f9f8ecfa4e75fd46942937f43cc9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cf1f65cd-d67f-4380-8352-84db761fc3fe",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'af06c4e1e064a6490d488506960e8bf8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8a073fac-692a-4ec0-a962-5537ef4d13b7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5048af2f388cfa1bd9ee077953f5ef1499a81ee57a8876a051ea96bd08ceb69c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0045313d-eebf-4d78-87d3-05912e442d6e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '664c8dfb65f86a691df9641d9d1ab67c5b39cda4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--225e17c4-8877-4dc5-bb7e-0e6ad55535f0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '14b03ada92dd81d6ce57f43889810087']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--16b1a1ea-da75-497b-9366-6560a32a7f63",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3190e725cc9eb7c116242da2d3f5dba46853b20f46e681df262e201cc22117e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e69d20f2-9073-473b-9c9a-d15e14b6bf87",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5acb3aa1f44924b0b1d3e9cac3098ad709aa397b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2238fd85-99ab-4126-8153-42dae1c4daf5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '82b07d1f6a53b4073ac2e66638051ff7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5fc1ff85-5985-4078-bfaf-c2567cbc9b5e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f009f01467722aa8ba3d7543b9dae37fb8f2de2e0d6ff46755d9684b47775e41']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0561eddb-2ba2-484c-9e01-a574a53a3417",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5db463fdb694978f876a9f94c9578e8182799ce1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c2f3e058-f1af-4c9e-b6ae-dd526ae698e2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'eedb2f28eec31de121432f3f9c3c5ba7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--a836201b-1f4f-46ba-98ad-e40aa3004e71",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'da400b87fba59ba933e1a77ce4ca27e6b42e27a3fd5551fbe8bf39853ed30bf4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--0b8f9226-e753-439f-952e-e6005d9cea4c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd0bf7118bdea8868e794171e176c7e1b45da7cfd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--930aea70-cbfb-4e9c-8ea4-514cb79fa73f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2b71bc9e931f39bebf8b27ad8a6c1341']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--00f7245c-1384-459b-bab6-d88b68bc1dc0",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '21451a9ffe2d82092e0b9f64601867ef9710e0de6cc2ec40de80571c6e6f8ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7eb8afde-f6b4-4a2c-93f0-48a7a1c6f3f5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8e401062e69b1b0907dc6e30a1ef6e6b9fc03dd0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--54059dac-6ab1-4cf2-b441-f3d687fe05ba",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '07238bdf46b7830ab24d2116023d5a44']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2ba30037-8e96-44ff-8c81-1eab285d984d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '55d1a2e48799a40611d43447de148f830fa867b21bdbaa065806ac84cadc43e4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2abeb197-0c61-46e8-a6a4-f44020fa4d8f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a3df4270a10a6a83faef107515581d8507d6fe05']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ad9b853c-b17f-4d9b-9980-4f6f9ba58956",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7d8ffd2d94d8eefeb6ae5e9bac5b5acf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1d9554be-7499-4adb-b478-ab3b3d91f001",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2fc9051101b18b9616ce459221b84fef1c482e895c8625d0b366ab76baad6ad6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--aee69dbc-026d-4dc3-a5f5-c74cc5c9c9ee",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bfdd623cb959c97bf8cfd98c174eef43a88d879f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--24fa7677-01f9-481a-8db1-1d3c355c42ad",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '650a784652a9717a921ca41b0e2ad337']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6ac1e418-acf3-40c4-a3ed-c8b62681024a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'de0fb47273fbffd2de3457a730c7e2ae6038b3452805f5bd95257a17ed004ac5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--876697c4-ce51-4b1f-b3f4-f9cfdb69190b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b2065e7db241b202f8766dd4f295f0ec5b3c7df3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b46e7057-e024-41a1-9d21-9f0589c46200",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5a0ae7088982e61cad12d0bfcc14d070']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--ad398999-2a3f-4470-b1c5-cd5fe532ae0b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '374f1774b3689e8f1cbbee2cdcef9a94bb30048b0f4f243b8c1c8d1d70ec8442']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--6a455eaf-1452-4ac9-b993-90ba66b6bba9",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '944e99725740271a01012d13ccbc9b9b4094fdbf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--d43192a9-308c-4fb1-9703-eae3843bafe1",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c1230aa332b3642ae0c6f64abf7823a9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cf382d7c-9627-46f7-a07d-74d4df60a9e4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3c031a468d230b44c1fe6bbc59d5445f78ce329885bc9f66687852fa7e61f7ed']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5c30c867-12f8-4243-a7b2-ee5c47e39aed",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '99e4e7ed8dd2d54f6b68b7c0f03bb361ede438ac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--955ad694-c80f-4920-9b05-e4c91e06c85e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e1086a6c67599a6edf00a209891d29d6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--86268b26-e003-4a90-8d0f-26349d617080",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd4414fffcc561578f53bdffc0a61ca081f45f8a7f203ec012ba80a3d2a45b7b0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--054d3da9-f75f-42ea-992d-6d498c28a85a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5ebb4bce1fcf09933c2d61c54b58721a20dca562']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5129702a-77b3-48b1-9ee3-85d208c0d6db",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '640b52a15b798fa6cee52f2f309f43f4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--fd9cd873-3db7-4f92-81dc-275063df6a4c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4d96580225828b1b735a02835b5d753992be7ccdfcfb80c50d7acaae3e8c63c6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c9a4f1d9-ffe7-4ac5-a17d-635ca11d1749",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '79fc0befe9e5530e2496a9fa6beadaa636119aa8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c00cd553-f665-4f6a-8463-4a92258a12e7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '42202e223b9d21079f397b9116093ac6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--c82c0792-d95f-4e7b-8b3b-10ded2577627",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '79c4bcc19a33e6b1ef4308b8d8ca93a6f97a08280d80d3ed856805d560e4489d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--295d1398-2035-4549-8523-021cee32534e",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '36016bbccebddd9060073f1c9f0c80a2c2dd9cc1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--922fbee5-d310-416c-93ca-2e72c40b887f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '708dd9be439c744b43ce18303b8426d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f58a84b6-dfc1-4d53-8446-ec01e72a13e3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd8d668e9d0c8e228b5d329b03cafd5e4b144cd955bacd7052d9c4a3b6ca67753']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--32383e32-e8e0-40b5-9280-4496d451cce5",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8b4dbcc306c0df0b96505747e13e9c15747aac38']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b00bf2d7-af95-4903-ae03-5a3a83063660",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b043ec1567ecceb84c20a853d9245132']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--2b8c49c8-1dc5-4297-bed2-740a23d6f836",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f6c3d4c2db6e10d5fe9dcddf771d6261a525e7789189f0cfdb4a87faf34d6dd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--bdd354fb-63e7-4e14-8134-cca4fd1b0e0c",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '48c3fa74a00f1115c0e089f23997f112c85741b4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cb587c78-cfde-462c-8182-eb69d087895d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3ae733df029c56fa2e3fc9c07458d8c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--1d4038b6-9acb-46c0-b972-62a69794108d",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72269cb148f90e8dd2eefc947eb59af88e8f7bb9fbca2dc0d0d572f7a727a6e1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--e52ec038-aafe-4450-be63-11a604bfab3a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '896fe06a9b746dbd9f581267fbf8209a9d071c77']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--4792535f-f13e-442c-abe5-38d688a6e2dd",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '81d32d0789ba7705f5ed8183d09d6785']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--464f5060-701c-41cb-86c6-d1cf8decfd03",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '352999525fed75cc48b4d0af95448c67ee75b13b4645d4a3d6c632e4e3044073']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--cc4c8634-3931-4d9b-9ce5-bd51f3f59651",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '78372f41d5e92207f278f059176bd8bdbf7b774c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--78ac5ba4-f787-454d-9e1a-7cce405ce1e4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e020e15263f94716347b3755415e3db2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--f6f0e447-2413-418c-a426-3b53243f2e6a",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1b8fc7508f0e1ccfb2fabb513054dfe517e29f42383d865e68f1b70fc96cc239']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--39310645-9ab6-49aa-aca8-e676600edb56",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '96d230111d22f00762507dfde87cef89818741a5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--8874ffe0-5296-4b82-bb3a-939a5f58b7e3",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = '158105fd8f227ab0a2e3440724520275']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--be0ab8ce-6a3c-4d0e-a584-05a6155059b2",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd64a0092cf3b55f68c671d462be80241d3a45b75667bb29f624f52aea7f1246f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--12be3a2e-4e79-409c-9c7f-e4f193c5d1f4",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '11662f991e15213c282357723bcc49059f6c55f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--7193f109-b139-4b8a-944d-b6be3efd1a62",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f2e0816f239a4066dcf4f035d3c91021']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--b7a41960-d307-4377-8dd1-f92f203523d7",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f4c27c563e9fd56990f1082cc185c8a6f0b04fee97b57042db10300e1eb37f97']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--318fa34e-bfb1-4b78-a9bd-f9ac1a46596f",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:40.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:40.000Z",
|
||
|
|
"description": "OpenIOC import",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b01b815d200a6cc90a0a15f9cde89fa93b7f9dc6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-08-19T07:26:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload installation"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload installation\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--55d42f26-69dc-4ab5-b636-4bba950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:24:22.000Z",
|
||
|
|
"modified": "2015-08-19T07:24:22.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"comment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "External analysis",
|
||
|
|
"x_misp_type": "comment",
|
||
|
|
"x_misp_value": "Did not import ht_medium_low.ioc.xml and hacking_team_filepaths.ioc.xml since they will have too many false positives"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--55d42f8f-2f94-485c-b2aa-4e8f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-08-19T07:26:07.000Z",
|
||
|
|
"modified": "2015-08-19T07:26:07.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"comment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "External analysis",
|
||
|
|
"x_misp_type": "comment",
|
||
|
|
"x_misp_value": "Deleted filenames since many of them would have false positives (calc.exe, excel.exe, etc..)"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "marking-definition",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
||
|
|
"created": "2017-01-20T00:00:00.000Z",
|
||
|
|
"definition_type": "tlp",
|
||
|
|
"name": "TLP:WHITE",
|
||
|
|
"definition": {
|
||
|
|
"tlp": "white"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|