73 lines
979 KiB
JSON
73 lines
979 KiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--89495010-cd5a-4250-9e57-c346426ae62a",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2023-08-25T09:12:06.000Z",
|
||
|
|
"modified": "2023-08-25T09:12:06.000Z",
|
||
|
|
"name": "CIRCL",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--89495010-cd5a-4250-9e57-c346426ae62a",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2023-08-25T09:12:06.000Z",
|
||
|
|
"modified": "2023-08-25T09:12:06.000Z",
|
||
|
|
"name": "Pandora analysis (NEW ORDER LIST GREEN VALLEY CORP.xlam)",
|
||
|
|
"published": "2023-08-25T09:54:35Z",
|
||
|
|
"object_refs": [
|
||
|
|
"indicator--31fb98c5-bc46-4f11-863e-e7eac6d4d37e"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"type:OSINT",
|
||
|
|
"osint:lifetime=\"perpetual\"",
|
||
|
|
"osint:certainty=\"50\"",
|
||
|
|
"tlp:clear"
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--31fb98c5-bc46-4f11-863e-e7eac6d4d37e",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2023-08-25T09:05:20.000Z",
|
||
|
|
"modified": "2023-08-25T09:05:20.000Z",
|
||
|
|
"pattern": "[file:hashes.MD5 = '80e6097461cd82991b69946d8054f48d' AND file:hashes.SHA1 = 'fd97abbc16fc30c09d7ea6b66ec359b9d9017b19' AND file:hashes.SHA256 = '50659dd03345c5b16d6ea45170d63ca5a1846019634b06b4e37a3b97b65f1a36' AND file:hashes.SHA512 = '2b1496bacc6ca39a9aa99a67ad051ee1e97131935d8e5cc548558830aa4f7a2cd11b8836a194a46ea11520cf6386f2f154aeeb4bd3db12ec2e98d9b50dc7b6b5' AND file:hashes.SSDEEP = '12288:A9GypEniidYleKQgGaDKQuAn9xTeCEhTgBQT3Uskc5S5Sgh8XgFwXhE9NNVxD:sjpE/2leZapuU9x6pS5SgZo+3NVh' AND file:name = 'NEW ORDER LIST GREEN VALLEY CORP.xlam' AND file:size = '750659' AND (file:content_ref.payload_bin = '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
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2023-08-25T09:05:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "file"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:name=\"file\"",
|
||
|
|
"misp:meta-category=\"file\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "marking-definition",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
||
|
|
"created": "2017-01-20T00:00:00.000Z",
|
||
|
|
"definition_type": "tlp",
|
||
|
|
"name": "TLP:WHITE",
|
||
|
|
"definition": {
|
||
|
|
"tlp": "white"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|