2023-04-21 13:25:09 +00:00
|
|
|
{
|
2023-06-14 17:31:25 +00:00
|
|
|
"type": "bundle",
|
|
|
|
|
"id": "bundle--57a8a426-c8f0-4893-8a2a-475d950d210f",
|
|
|
|
|
"objects": [
|
|
|
|
|
{
|
|
|
|
|
"type": "identity",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"name": "CthulhuSPRL.be",
|
|
|
|
|
"identity_class": "organization"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "report",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "report--57a8a426-c8f0-4893-8a2a-475d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"name": "OSINT Orcus \u00e2\u20ac\u201c Birth of an unusual plugin builder RAT by Palo Alto Unit 42",
|
|
|
|
|
"published": "2016-08-08T15:47:15Z",
|
|
|
|
|
"object_refs": [
|
|
|
|
|
"observed-data--57a8a440-55c4-42a9-b572-4779950d210f",
|
|
|
|
|
"url--57a8a440-55c4-42a9-b572-4779950d210f",
|
|
|
|
|
"observed-data--57a8a440-3a38-43a9-acd1-4dc7950d210f",
|
|
|
|
|
"url--57a8a440-3a38-43a9-acd1-4dc7950d210f",
|
|
|
|
|
"indicator--57a8a451-264c-46ab-8b92-433f950d210f",
|
|
|
|
|
"indicator--57a8a451-d590-4b6c-8cd5-49b5950d210f",
|
|
|
|
|
"indicator--57a8a451-7278-4ac4-af7e-4d4b950d210f",
|
|
|
|
|
"indicator--57a8a451-e648-48d6-927d-4a4e950d210f",
|
|
|
|
|
"indicator--57a8a452-fb94-434f-a589-4011950d210f",
|
|
|
|
|
"indicator--57a8a452-9e14-4fc0-8c19-47b4950d210f",
|
|
|
|
|
"indicator--57a8a453-c510-4921-b635-4e62950d210f",
|
|
|
|
|
"indicator--57a8a453-1588-4492-9d64-47ce950d210f",
|
|
|
|
|
"indicator--57a8a453-4218-44d9-a6ba-4ca8950d210f",
|
|
|
|
|
"indicator--57a8a454-5054-4948-b66b-464f950d210f",
|
|
|
|
|
"indicator--57a8a454-6ce0-4a60-ae90-47b1950d210f",
|
|
|
|
|
"indicator--57a8a455-0dc4-4a9b-b4e3-4e4d950d210f",
|
|
|
|
|
"indicator--57a8a455-2d38-49a4-a6b4-4c9b950d210f",
|
|
|
|
|
"indicator--57a8a456-fab0-403e-822f-4a0c950d210f",
|
|
|
|
|
"indicator--57a8a457-d4a4-48c4-b640-4a50950d210f",
|
|
|
|
|
"indicator--57a8a458-fdd0-461d-a41b-4262950d210f",
|
|
|
|
|
"indicator--57a8a459-27d0-48cd-96ce-4673950d210f",
|
|
|
|
|
"indicator--57a8a45a-5118-4d05-a937-4358950d210f",
|
|
|
|
|
"indicator--57a8a45b-2f70-4d64-855a-4687950d210f",
|
|
|
|
|
"indicator--57a8a45b-8334-414f-89ce-4d4d950d210f",
|
|
|
|
|
"indicator--57a8a45c-5360-4abf-8796-4fe7950d210f",
|
|
|
|
|
"indicator--57a8a45d-24a8-40b2-b8a6-4136950d210f",
|
|
|
|
|
"indicator--57a8a45e-0f80-4a92-b7e4-4ba3950d210f",
|
|
|
|
|
"indicator--57a8a45e-d72c-4304-90d4-4ef6950d210f",
|
|
|
|
|
"indicator--57a8a45f-484c-428b-a881-45a2950d210f",
|
|
|
|
|
"indicator--57a8a45f-7094-4a8d-ad71-455a950d210f",
|
|
|
|
|
"indicator--57a8a460-3914-43c3-a3fe-45b2950d210f",
|
|
|
|
|
"indicator--57a8a460-ecb8-4014-ba98-4cf8950d210f",
|
|
|
|
|
"indicator--57a8a460-6d08-4d12-9408-4bea950d210f",
|
|
|
|
|
"indicator--57a8a461-1048-4dd1-af1e-455d950d210f",
|
|
|
|
|
"indicator--57a8a461-1d20-4330-b2be-4022950d210f",
|
|
|
|
|
"indicator--57a8a461-4bbc-456c-86c0-45a6950d210f",
|
|
|
|
|
"indicator--57a8a462-f448-46c4-92b9-4acd950d210f",
|
|
|
|
|
"indicator--57a8a462-02f8-4d32-8a25-4c7a950d210f",
|
|
|
|
|
"indicator--57a8a463-abb0-4cfa-a7de-4070950d210f",
|
|
|
|
|
"indicator--57a8a463-1d04-462e-8995-439b950d210f",
|
|
|
|
|
"indicator--57a8a463-0ed4-41ab-8e06-48b2950d210f",
|
|
|
|
|
"indicator--57a8a464-cde4-45e0-9ea3-4230950d210f",
|
|
|
|
|
"indicator--57a8a464-1af8-46ba-b327-4ca9950d210f",
|
|
|
|
|
"indicator--57a8a464-be8c-4b7b-a24e-460e950d210f",
|
|
|
|
|
"indicator--57a8a465-3054-4df1-a851-4c65950d210f",
|
|
|
|
|
"indicator--57a8a465-5a80-4f23-ae26-45e0950d210f",
|
|
|
|
|
"indicator--57a8a465-e654-4f62-a279-49f7950d210f",
|
|
|
|
|
"indicator--57a8a466-c158-4a3d-80e1-4ff3950d210f",
|
|
|
|
|
"indicator--57a8a466-f800-4bd9-8df7-4150950d210f",
|
|
|
|
|
"indicator--57a8a467-e030-4bb7-a4bc-45e1950d210f",
|
|
|
|
|
"indicator--57a8a467-aa7c-4202-8fd6-4012950d210f",
|
|
|
|
|
"indicator--57a8a467-8b58-42ce-a94e-43b7950d210f",
|
|
|
|
|
"indicator--57a8a468-c074-43e1-bf3a-461d950d210f",
|
|
|
|
|
"indicator--57a8a468-4d4c-4005-a9de-4196950d210f",
|
|
|
|
|
"indicator--57a8a468-d06c-40a3-b5c0-492e950d210f",
|
|
|
|
|
"indicator--57a8a469-cdf4-4145-9d69-44f5950d210f",
|
|
|
|
|
"indicator--57a8a469-66f4-4e63-be18-45aa950d210f",
|
|
|
|
|
"indicator--57a8a46a-7e6c-492c-a4f9-407d950d210f",
|
|
|
|
|
"indicator--57a8a46a-ad20-4702-a5f3-4df1950d210f",
|
|
|
|
|
"indicator--57a8a46a-69b4-4384-a129-4c64950d210f",
|
|
|
|
|
"indicator--57a8a46b-3238-4f56-b637-4078950d210f",
|
|
|
|
|
"indicator--57a8a46b-67c8-4318-8f75-431e950d210f",
|
|
|
|
|
"indicator--57a8a46b-2470-480f-83e4-4340950d210f",
|
|
|
|
|
"indicator--57a8a46c-0854-405a-bdf6-406a950d210f",
|
|
|
|
|
"indicator--57a8a46c-cba0-49df-b752-4ae9950d210f",
|
|
|
|
|
"indicator--57a8a46d-f898-4c24-a742-44a7950d210f",
|
|
|
|
|
"indicator--57a8a46d-e394-4ab2-a6ca-467a950d210f",
|
|
|
|
|
"indicator--57a8a46d-7360-422e-a006-41ef950d210f",
|
|
|
|
|
"indicator--57a8a46e-dc54-43d0-a8cf-4658950d210f",
|
|
|
|
|
"indicator--57a8a46e-7b08-45f7-b156-478b950d210f",
|
|
|
|
|
"indicator--57a8a46e-cd4c-4938-8177-49a8950d210f",
|
|
|
|
|
"indicator--57a8a46f-1ce4-4536-9de4-458f950d210f",
|
|
|
|
|
"indicator--57a8a46f-41e0-4818-b80a-42e9950d210f",
|
|
|
|
|
"indicator--57a8a46f-81b0-47d5-9c5e-4c4f950d210f",
|
|
|
|
|
"indicator--57a8a470-9004-4717-a680-4539950d210f",
|
|
|
|
|
"indicator--57a8a470-43fc-4cf9-bc4c-4af9950d210f",
|
|
|
|
|
"indicator--57a8a471-d550-4fc7-80d7-41fd950d210f",
|
|
|
|
|
"indicator--57a8a471-5dcc-45e0-bd75-47d9950d210f",
|
|
|
|
|
"indicator--57a8a471-66b0-4b0f-8f81-4040950d210f",
|
|
|
|
|
"indicator--57a8a472-cee0-4470-a52f-4fd7950d210f",
|
|
|
|
|
"indicator--57a8a472-2ce4-41f0-bf44-4087950d210f",
|
|
|
|
|
"indicator--57a8a472-4188-4200-9a5a-4707950d210f",
|
|
|
|
|
"indicator--57a8a473-febc-4d55-b703-4e4a950d210f",
|
|
|
|
|
"indicator--57a8a473-c080-45ce-b31c-4a2f950d210f",
|
|
|
|
|
"indicator--57a8a473-65dc-4f69-9d3c-4811950d210f",
|
|
|
|
|
"indicator--57a8a474-c850-40ad-b6b0-439d950d210f",
|
|
|
|
|
"indicator--57a8a474-7ad8-4408-bac0-4326950d210f",
|
|
|
|
|
"indicator--57a8a475-8628-4e6e-9f1e-4717950d210f",
|
|
|
|
|
"indicator--57a8a475-ad04-44dd-a629-4fa1950d210f",
|
|
|
|
|
"indicator--57a8a475-41c0-4f6d-8b59-4a06950d210f",
|
|
|
|
|
"indicator--57a8a476-84d0-42ae-b675-4a53950d210f",
|
|
|
|
|
"indicator--57a8a476-eb6c-4346-940f-47ce950d210f",
|
|
|
|
|
"indicator--57a8a476-38f4-4c3b-ad50-40b2950d210f",
|
|
|
|
|
"indicator--57a8a477-582c-4c1f-93f2-4061950d210f",
|
|
|
|
|
"indicator--57a8a477-a4ac-4f26-9286-4440950d210f",
|
|
|
|
|
"indicator--57a8a478-71b0-446e-9a99-4be9950d210f",
|
|
|
|
|
"indicator--57a8a478-4030-4574-b701-47e4950d210f",
|
|
|
|
|
"indicator--57a8a478-0588-41b7-92ec-4649950d210f",
|
|
|
|
|
"indicator--57a8a479-35d8-48f9-8201-46f9950d210f",
|
|
|
|
|
"indicator--57a8a479-229c-427b-a42d-4cde950d210f",
|
|
|
|
|
"indicator--57a8a479-5a20-4879-b991-443b950d210f",
|
|
|
|
|
"indicator--57a8a47a-6834-4b9c-afc6-4e5a950d210f",
|
|
|
|
|
"indicator--57a8a47a-03f0-45ec-b73e-44e4950d210f",
|
|
|
|
|
"indicator--57a8a47a-67f4-46f4-8a8a-443f950d210f",
|
|
|
|
|
"indicator--57a8a47b-38d0-44c1-b36e-46ec950d210f",
|
|
|
|
|
"indicator--57a8a47b-98ec-41d1-b9f4-4081950d210f",
|
|
|
|
|
"indicator--57a8a47c-d520-40be-99a3-4232950d210f",
|
|
|
|
|
"indicator--57a8a47c-0058-4e8e-bbea-4813950d210f",
|
|
|
|
|
"indicator--57a8a47c-992c-4411-a39f-4136950d210f",
|
|
|
|
|
"indicator--57a8a47d-dc3c-40eb-9d40-4b63950d210f",
|
|
|
|
|
"indicator--57a8a47d-fd68-4cac-b60a-4461950d210f",
|
|
|
|
|
"indicator--57a8a47d-8b6c-43c0-bc2b-420a950d210f",
|
|
|
|
|
"indicator--57a8a47e-bdf8-4a6f-b378-4b6b950d210f",
|
|
|
|
|
"indicator--57a8a47e-e7d8-4772-a71d-416f950d210f",
|
|
|
|
|
"indicator--57a8a47f-a6e0-4192-9c22-4961950d210f",
|
|
|
|
|
"indicator--57a8a47f-b2dc-425d-84f9-45d6950d210f",
|
|
|
|
|
"indicator--57a8a47f-2d44-4ad1-8b67-401e950d210f",
|
|
|
|
|
"indicator--57a8a480-3df8-4190-967e-4bfd950d210f",
|
|
|
|
|
"indicator--57a8a480-5aec-4cc7-9cbc-461a950d210f",
|
|
|
|
|
"indicator--57a8a480-bcb8-43e1-9225-4ade950d210f",
|
|
|
|
|
"indicator--57a8a481-21e4-4d15-9987-4849950d210f",
|
|
|
|
|
"indicator--57a8a481-31e8-4546-873d-4953950d210f",
|
|
|
|
|
"indicator--57a8a481-3be8-459b-aec1-4d8a950d210f",
|
|
|
|
|
"indicator--57a8a482-a818-4d5f-a699-47cf950d210f",
|
|
|
|
|
"indicator--57a8a482-0124-4bb1-a056-43ea950d210f",
|
|
|
|
|
"indicator--57a8a483-481c-4cae-88b4-4560950d210f",
|
|
|
|
|
"indicator--57a8a483-976c-44e5-9675-4b3b950d210f",
|
|
|
|
|
"indicator--57a8a483-bde8-4550-bdc6-4dd0950d210f",
|
|
|
|
|
"indicator--57a8a484-d3f8-4baa-b9ed-48f2950d210f",
|
|
|
|
|
"indicator--57a8a484-b598-4e25-8b3c-4d15950d210f",
|
|
|
|
|
"indicator--57a8a484-356c-4589-b508-4ddf950d210f",
|
|
|
|
|
"indicator--57a8a485-93e4-4d51-930f-4ad4950d210f",
|
|
|
|
|
"indicator--57a8a485-39ac-47ca-9775-45cb950d210f",
|
|
|
|
|
"indicator--57a8a486-3cc8-4acd-8a45-4ef2950d210f",
|
|
|
|
|
"indicator--57a8a486-bbac-49e8-9391-430e950d210f",
|
|
|
|
|
"indicator--57a8a487-6888-4a9c-9280-4127950d210f",
|
|
|
|
|
"indicator--57a8a488-fc54-4f9c-bc44-4365950d210f",
|
|
|
|
|
"indicator--57a8a488-0394-4e72-b1f8-488a950d210f",
|
|
|
|
|
"indicator--57a8a488-c7c8-4d5b-ad0c-463f950d210f",
|
|
|
|
|
"indicator--57a8a489-cc5c-4feb-a641-4fe0950d210f",
|
|
|
|
|
"indicator--57a8a48a-3e58-48e0-b41f-4c7f950d210f",
|
|
|
|
|
"indicator--57a8a48a-2bf0-45df-bdbf-4254950d210f",
|
|
|
|
|
"indicator--57a8a48b-94c4-45f0-ab31-4e8c950d210f",
|
|
|
|
|
"indicator--57a8a48b-3450-4f90-8652-4aa1950d210f",
|
|
|
|
|
"indicator--57a8a48c-be7c-4b15-9560-4113950d210f",
|
|
|
|
|
"indicator--57a8a48c-1f20-4c55-9db9-4c92950d210f",
|
|
|
|
|
"indicator--57a8a48d-d8bc-4012-ae4a-4442950d210f",
|
|
|
|
|
"indicator--57a8a48e-d68c-4565-983f-4495950d210f",
|
|
|
|
|
"indicator--57a8a48f-4be4-4d3b-886a-4783950d210f",
|
|
|
|
|
"indicator--57a8a490-a9f8-42cb-ad75-4bac950d210f",
|
|
|
|
|
"indicator--57a8a491-a124-493e-aa74-4395950d210f",
|
|
|
|
|
"indicator--57a8a492-ea54-47a7-ad66-481a950d210f",
|
|
|
|
|
"indicator--57a8a492-9378-4ac2-8097-4cdc950d210f",
|
|
|
|
|
"indicator--57a8a493-1940-48bf-a9af-42dd950d210f",
|
|
|
|
|
"indicator--57a8a494-e75c-4b43-bd06-468e950d210f",
|
|
|
|
|
"indicator--57a8a494-3914-4d4d-b4e9-4c4f950d210f",
|
|
|
|
|
"indicator--57a8a494-f530-4788-8409-4596950d210f",
|
|
|
|
|
"indicator--57a8a495-2db8-4e83-9021-4c45950d210f",
|
|
|
|
|
"indicator--57a8a496-ea74-488c-8fbc-47a6950d210f",
|
|
|
|
|
"indicator--57a8a496-e9a4-44f1-92e8-44be950d210f",
|
|
|
|
|
"indicator--57a8a497-7d94-48ed-8cc4-4330950d210f",
|
|
|
|
|
"indicator--57a8a498-0950-4999-a170-4b16950d210f",
|
|
|
|
|
"indicator--57a8a498-df2c-463c-86fb-4827950d210f",
|
|
|
|
|
"indicator--57a8a498-1608-466a-b0b4-424f950d210f",
|
|
|
|
|
"indicator--57a8a499-514c-4054-8098-4136950d210f",
|
|
|
|
|
"indicator--57a8a49a-9518-4897-8450-4eaf950d210f",
|
|
|
|
|
"indicator--57a8a49b-eadc-455c-9678-4983950d210f",
|
|
|
|
|
"indicator--57a8a49b-5620-4448-bc7e-4673950d210f",
|
|
|
|
|
"indicator--57a8a49c-ccd8-4d2c-b524-4540950d210f",
|
|
|
|
|
"indicator--57a8a49d-6958-45a7-8466-4c14950d210f",
|
|
|
|
|
"indicator--57a8a49d-1358-4461-b913-4662950d210f",
|
|
|
|
|
"indicator--57a8a49e-3780-4559-a3ab-46f5950d210f",
|
|
|
|
|
"indicator--57a8a49e-d2f0-4603-a988-4e40950d210f",
|
|
|
|
|
"indicator--57a8a49f-68c0-4cbc-8d28-44df950d210f",
|
|
|
|
|
"indicator--57a8a49f-c418-454a-9328-4db9950d210f",
|
|
|
|
|
"indicator--57a8a4a0-c330-42f5-a1d6-491f950d210f",
|
|
|
|
|
"indicator--57a8a4a1-bf74-4c9a-ae3c-4629950d210f",
|
|
|
|
|
"indicator--57a8a4a1-ff8c-40e0-8907-40fa950d210f",
|
|
|
|
|
"indicator--57a8a4a2-a804-4c0b-a69d-46ea950d210f",
|
|
|
|
|
"indicator--57a8a4a2-e538-4971-90f4-4ea6950d210f",
|
|
|
|
|
"indicator--57a8a4a2-9404-4fc3-a7e6-49b7950d210f",
|
|
|
|
|
"indicator--57a8a4a3-da60-42fd-81d6-4e2f950d210f",
|
|
|
|
|
"indicator--57a8a4a3-c1e0-41e6-b506-490a950d210f",
|
|
|
|
|
"indicator--57a8a4a3-aaec-4b2e-94d7-4962950d210f",
|
|
|
|
|
"indicator--57a8a4a4-5438-4fd7-b121-40a3950d210f",
|
|
|
|
|
"indicator--57a8a4a4-7038-46bf-91fe-45dc950d210f",
|
|
|
|
|
"indicator--57a8a4a5-d558-4841-88d4-4026950d210f",
|
|
|
|
|
"indicator--57a8a4a5-4560-40af-b8d3-40cd950d210f",
|
|
|
|
|
"indicator--57a8a4a6-26f0-4f0b-97f7-413e950d210f",
|
|
|
|
|
"indicator--57a8a4a6-9458-49e4-9afc-4f28950d210f",
|
|
|
|
|
"indicator--57a8a4a7-b83c-4e2a-92cf-4bc0950d210f",
|
|
|
|
|
"indicator--57a8a4a7-5e3c-4120-bdfd-4fae950d210f",
|
|
|
|
|
"indicator--57a8a4a7-ba14-489b-8f4f-4cf5950d210f",
|
|
|
|
|
"indicator--57a8a4a8-fc20-4e76-8658-4567950d210f",
|
|
|
|
|
"indicator--57a8a4a8-47e0-4ad9-b2f6-4fc4950d210f",
|
|
|
|
|
"indicator--57a8a4a9-69c8-4eca-b316-4f66950d210f",
|
|
|
|
|
"indicator--57a8a4a9-2550-4562-a68b-45c4950d210f",
|
|
|
|
|
"indicator--57a8a4aa-4c44-4a40-af5f-4feb950d210f",
|
|
|
|
|
"indicator--57a8a4aa-ba50-4c47-92e7-4356950d210f",
|
|
|
|
|
"indicator--57a8a4ab-f1d0-4b8a-88fb-48ba950d210f",
|
|
|
|
|
"indicator--57a8a4ab-a268-4c2f-9ec4-4993950d210f",
|
|
|
|
|
"indicator--57a8a4ac-34d8-4882-b437-46f6950d210f",
|
|
|
|
|
"indicator--57a8a4ac-c73c-45b7-8f43-4165950d210f",
|
|
|
|
|
"indicator--57a8a4ad-ee18-44ea-a396-4c48950d210f",
|
|
|
|
|
"indicator--57a8a4ad-f5b8-4fd1-96a4-4d0d950d210f",
|
|
|
|
|
"indicator--57a8a4ad-f06c-40d8-aa80-4b78950d210f",
|
|
|
|
|
"indicator--57a8a4ae-0c40-4ade-9608-4569950d210f",
|
|
|
|
|
"indicator--57a8a4ae-9744-4cfd-a036-4938950d210f",
|
|
|
|
|
"indicator--57a8a4af-b668-44bf-afc0-43ea950d210f",
|
|
|
|
|
"indicator--57a8a4af-0d8c-4170-b861-4938950d210f",
|
|
|
|
|
"indicator--57a8a4b0-b58c-49ba-b312-4822950d210f",
|
|
|
|
|
"indicator--57a8a4b0-ded8-4fa9-95c0-4d4a950d210f",
|
|
|
|
|
"indicator--57a8a4b1-62bc-4fff-b376-4b7c950d210f",
|
|
|
|
|
"indicator--57a8a4b1-5a08-49e1-bf43-4821950d210f",
|
|
|
|
|
"indicator--57a8a4b2-fc2c-4678-874b-4146950d210f",
|
|
|
|
|
"indicator--57a8a4b2-ba58-4c81-808a-44ac950d210f",
|
|
|
|
|
"indicator--57a8a4b3-0de4-44fa-b5c0-4e1d950d210f",
|
|
|
|
|
"indicator--57a8a4b3-f348-4cfb-a531-4cb2950d210f",
|
|
|
|
|
"indicator--57a8a4b4-8dac-4299-b747-4136950d210f",
|
|
|
|
|
"indicator--57a8a4b4-2780-4688-a916-40d9950d210f",
|
|
|
|
|
"indicator--57a8a4b5-0b68-4dd0-833e-4102950d210f",
|
|
|
|
|
"indicator--57a8a4b5-9528-4bf5-852e-4793950d210f",
|
|
|
|
|
"indicator--57a8a4b6-5990-4814-b86f-4d09950d210f",
|
|
|
|
|
"indicator--57a8a4b6-1340-4aa9-9779-4e4c950d210f",
|
|
|
|
|
"indicator--57a8a4b6-0438-4874-97e0-47d2950d210f",
|
|
|
|
|
"indicator--57a8a4b7-e704-4dbf-ac8b-4b22950d210f",
|
|
|
|
|
"indicator--57a8a4b7-1fe4-435d-8a5d-4e12950d210f",
|
|
|
|
|
"indicator--57a8a4b8-18c0-452c-95e0-4e43950d210f",
|
|
|
|
|
"indicator--57a8a4b8-e2d8-41df-8097-4587950d210f",
|
|
|
|
|
"indicator--57a8a4b9-d778-4190-945f-41c1950d210f",
|
|
|
|
|
"indicator--57a8a4b9-9534-4bad-b7fe-4b51950d210f",
|
|
|
|
|
"indicator--57a8a4ba-32c4-4d87-a4e9-4a83950d210f",
|
|
|
|
|
"indicator--57a8a4ba-605c-48dd-bdfa-43bb950d210f",
|
|
|
|
|
"indicator--57a8a4bb-e238-481b-90a8-4933950d210f",
|
|
|
|
|
"indicator--57a8a4bb-7a7c-4b0a-a07e-4f68950d210f",
|
|
|
|
|
"indicator--57a8a4bc-b050-412b-bbeb-448a950d210f",
|
|
|
|
|
"indicator--57a8a4bc-26d8-42ca-b100-41b1950d210f",
|
|
|
|
|
"indicator--57a8a4bd-3260-4281-8825-4ba1950d210f",
|
|
|
|
|
"indicator--57a8a4bd-7830-44fb-bf14-40a7950d210f",
|
|
|
|
|
"indicator--57a8a4be-50a0-44c8-abf4-46e4950d210f",
|
|
|
|
|
"indicator--57a8a4be-ab64-4b02-b34d-4ea4950d210f",
|
|
|
|
|
"indicator--57a8a4bf-515c-4899-a44b-4993950d210f",
|
|
|
|
|
"indicator--57a8a4bf-8c58-442e-bdcc-4a9e950d210f",
|
|
|
|
|
"indicator--57a8a4bf-a0f0-48a9-ab2e-49ed950d210f",
|
|
|
|
|
"indicator--57a8a4c0-8194-434a-967d-4c89950d210f",
|
|
|
|
|
"indicator--57a8a4c0-ff14-4807-9505-4cbb950d210f",
|
|
|
|
|
"indicator--57a8a4c1-4354-4bd2-9399-4ab8950d210f",
|
|
|
|
|
"indicator--57a8a4c1-52b4-499c-bb65-4bfa950d210f",
|
|
|
|
|
"indicator--57a8a4c2-ecc0-43f1-8393-43d0950d210f",
|
|
|
|
|
"indicator--57a8a4c2-fd4c-48db-8d1d-457c950d210f",
|
|
|
|
|
"indicator--57a8a4c3-083c-4efb-ac7c-45cc950d210f",
|
|
|
|
|
"indicator--57a8a4c3-82ec-4e7a-8a69-4a71950d210f",
|
|
|
|
|
"indicator--57a8a4c3-be80-4bb5-a419-49c4950d210f",
|
|
|
|
|
"indicator--57a8a4c4-32ec-4854-932e-4491950d210f",
|
|
|
|
|
"indicator--57a8a4c4-cf48-462a-a1b8-4267950d210f",
|
|
|
|
|
"indicator--57a8a4c5-e308-47b7-b686-4844950d210f",
|
|
|
|
|
"indicator--57a8a4c5-8220-4944-8156-4831950d210f",
|
|
|
|
|
"indicator--57a8a4c6-1fb4-4f74-abb7-4f31950d210f",
|
|
|
|
|
"indicator--57a8a4c6-c040-4e4f-bf90-4777950d210f",
|
|
|
|
|
"indicator--57a8a4c7-bf04-4623-ac42-42af950d210f",
|
|
|
|
|
"indicator--57a8a4c7-fe18-4574-9272-4d2e950d210f",
|
|
|
|
|
"indicator--57a8a4c7-4ba0-4481-baf3-48d5950d210f",
|
|
|
|
|
"indicator--57a8a4c8-be5c-467c-b245-440a950d210f",
|
|
|
|
|
"indicator--57a8a4c8-ee4c-408b-81e2-4d9b950d210f",
|
|
|
|
|
"indicator--57a8a4c9-d554-4882-8481-4c0d950d210f",
|
|
|
|
|
"indicator--57a8a4c9-13f8-4753-93a9-4e8a950d210f",
|
|
|
|
|
"indicator--57a8a4c9-48d8-4b5e-bb69-44e8950d210f",
|
|
|
|
|
"indicator--57a8a4ca-57d0-49fd-afbc-4a18950d210f",
|
|
|
|
|
"indicator--57a8a4cb-b94c-4dbb-adfb-492f950d210f",
|
|
|
|
|
"indicator--57a8a4cc-b758-440c-b9ff-424b950d210f",
|
|
|
|
|
"indicator--57a8a4cd-95b8-4519-a10b-4e63950d210f",
|
|
|
|
|
"indicator--57a8a4cd-6ffc-44f3-9f19-482f950d210f",
|
|
|
|
|
"indicator--57a8a4cd-7008-4432-b6e8-4d49950d210f",
|
|
|
|
|
"indicator--57a8a4ce-f588-4248-91b7-4e25950d210f",
|
|
|
|
|
"indicator--57a8a4ce-0aa0-486a-97b9-40bb950d210f",
|
|
|
|
|
"indicator--57a8a4ce-3e04-4f6c-9bb7-4830950d210f",
|
|
|
|
|
"indicator--57a8a4cf-ddb0-4978-b61b-4d29950d210f",
|
|
|
|
|
"indicator--57a8a4cf-4ec4-4b58-b27d-4807950d210f",
|
|
|
|
|
"indicator--57a8a4d0-114c-431f-b443-48de950d210f",
|
|
|
|
|
"indicator--57a8a4d0-f6b0-4afa-a1b7-4729950d210f",
|
|
|
|
|
"indicator--57a8a4d0-1d14-41d7-a2f7-4c6a950d210f",
|
|
|
|
|
"indicator--57a8a4d1-b058-4dfb-87ba-4e80950d210f",
|
|
|
|
|
"indicator--57a8a4d1-a9a0-46cc-9b71-4eae950d210f",
|
|
|
|
|
"indicator--57a8a4d2-c124-44fd-9a50-489c950d210f",
|
|
|
|
|
"indicator--57a8a4d2-e810-4011-a61f-43b2950d210f",
|
|
|
|
|
"indicator--57a8a4d3-b6f4-46bc-af24-4685950d210f",
|
|
|
|
|
"indicator--57a8a4d3-b7c4-4b1d-948f-4568950d210f",
|
|
|
|
|
"indicator--57a8a4d3-aec0-41af-953e-413f950d210f",
|
|
|
|
|
"indicator--57a8a4d3-0ad8-47a9-a946-4823950d210f",
|
|
|
|
|
"indicator--57a8a4d3-bc20-45ba-b391-4e8e950d210f",
|
|
|
|
|
"indicator--57a8a4d4-f8e8-4acd-8129-4fba950d210f",
|
|
|
|
|
"indicator--57a8a4d4-f040-483a-8e5a-4253950d210f",
|
|
|
|
|
"indicator--57a8a4d4-d0c4-4e4b-80ad-47f1950d210f",
|
|
|
|
|
"indicator--57a8a4d4-55e8-4fa0-a4ff-4e24950d210f",
|
|
|
|
|
"indicator--57a8a4d5-2b24-479e-80f3-460f950d210f",
|
|
|
|
|
"indicator--57a8a4d5-f6fc-4e27-b60e-42a9950d210f",
|
|
|
|
|
"indicator--57a8a4d5-3bbc-4048-b8f2-4a2a950d210f",
|
|
|
|
|
"indicator--57a8a4d5-49a0-4053-b37f-4a7b950d210f",
|
|
|
|
|
"indicator--57a8a4d5-4fe0-4d66-a6e2-4e72950d210f",
|
|
|
|
|
"indicator--57a8a4d6-4410-46ec-83c1-4c5b950d210f",
|
|
|
|
|
"indicator--57a8a4d6-f5bc-4d49-adef-45cb950d210f",
|
|
|
|
|
"indicator--57a8a4d6-b130-4b51-b8b5-4672950d210f",
|
|
|
|
|
"indicator--57a8a4d6-ff80-4425-afc9-42a2950d210f",
|
|
|
|
|
"indicator--57a8a4d6-e364-49bc-bae7-4e9c950d210f",
|
|
|
|
|
"indicator--57a8a4d6-02c4-4b04-966d-4c55950d210f",
|
|
|
|
|
"indicator--57a8a4d7-e8b8-4c3e-83fa-46ab950d210f",
|
|
|
|
|
"indicator--57a8a4d7-cdb4-4f9a-b5d7-4426950d210f",
|
|
|
|
|
"indicator--57a8a4d7-f610-421e-8bf3-4d37950d210f",
|
|
|
|
|
"indicator--57a8a4d8-b450-453d-af00-4c7c950d210f",
|
|
|
|
|
"indicator--57a8a4d8-a65c-4f67-adfa-46b1950d210f",
|
|
|
|
|
"indicator--57a8a4d9-d208-464c-8a74-4cab950d210f",
|
|
|
|
|
"indicator--57a8a4d9-6388-4167-83de-4515950d210f",
|
|
|
|
|
"indicator--57a8a4d9-5038-4977-bb2c-450c950d210f",
|
|
|
|
|
"indicator--57a8a4da-bc88-4d27-ac1e-4ab3950d210f",
|
|
|
|
|
"indicator--57a8a4da-ef34-4e2a-8d17-4fd5950d210f",
|
|
|
|
|
"indicator--57a8a4db-9720-4ce0-acef-4d2e950d210f",
|
|
|
|
|
"indicator--57a8a4db-f82c-4db7-a354-4ea1950d210f",
|
|
|
|
|
"indicator--57a8a4db-fe54-490c-aafd-424f950d210f",
|
|
|
|
|
"indicator--57a8a4dc-e554-42a7-81dc-4348950d210f",
|
|
|
|
|
"indicator--57a8a4dc-7f54-4fe9-8bcc-4dfb950d210f",
|
|
|
|
|
"indicator--57a8a4dc-5bb8-4ddc-987f-4b5f950d210f",
|
|
|
|
|
"indicator--57a8a4dd-fcd4-425f-bb1b-4b4e950d210f",
|
|
|
|
|
"indicator--57a8a4dd-9e14-4016-b570-4ce1950d210f",
|
|
|
|
|
"indicator--57a8a4de-0a2c-4af6-8633-445c950d210f",
|
|
|
|
|
"indicator--57a8a4de-b9d8-4330-bd56-43cc950d210f",
|
|
|
|
|
"indicator--57a8a4df-cd60-46cc-b541-4b9f950d210f",
|
|
|
|
|
"indicator--57a8a4df-73a4-4702-9997-4f39950d210f",
|
|
|
|
|
"indicator--57a8a4e0-71d4-4a73-b11f-4198950d210f",
|
|
|
|
|
"indicator--57a8a4e0-4e48-4924-bbe2-4ecb950d210f",
|
|
|
|
|
"indicator--57a8a4e1-d8dc-4118-ba22-46d4950d210f",
|
|
|
|
|
"indicator--57a8a4e1-5790-4c41-978c-4aab950d210f",
|
|
|
|
|
"indicator--57a8a4e2-9450-48f0-86ee-464a950d210f",
|
|
|
|
|
"indicator--57a8a4e2-b180-492b-9534-480b950d210f",
|
|
|
|
|
"indicator--57a8a4e3-8134-49ae-9708-4c71950d210f",
|
|
|
|
|
"indicator--57a8a4e3-a3e4-4658-b202-4000950d210f",
|
|
|
|
|
"indicator--57a8a4e4-55e8-4425-b3a4-461a950d210f",
|
|
|
|
|
"indicator--57a8a4e4-7f6c-4676-b262-4c1e950d210f",
|
|
|
|
|
"indicator--57a8a4e4-5450-4705-8eb2-4c94950d210f",
|
|
|
|
|
"indicator--57a8a4e5-205c-4302-a309-4e5c950d210f",
|
|
|
|
|
"indicator--57a8a4e5-0b28-48e3-83e3-4360950d210f",
|
|
|
|
|
"indicator--57a8a4e6-5bf0-4ca7-9dd2-4c66950d210f",
|
|
|
|
|
"indicator--57a8a4e6-d698-4846-b2ff-4311950d210f",
|
|
|
|
|
"indicator--57a8a4e7-3310-49ad-bfe5-48ab950d210f",
|
|
|
|
|
"indicator--57a8a4e7-9798-4809-beed-40de950d210f",
|
|
|
|
|
"indicator--57a8a4e8-1abc-442c-8541-4d98950d210f",
|
|
|
|
|
"indicator--57a8a4e8-4e4c-420b-824d-489e950d210f",
|
|
|
|
|
"indicator--57a8a4e9-675c-4389-a301-4633950d210f",
|
|
|
|
|
"indicator--57a8a4e9-cc50-4408-8932-4429950d210f",
|
|
|
|
|
"indicator--57a8a4ea-6dd0-4a34-bb66-4f55950d210f",
|
|
|
|
|
"indicator--57a8a4ea-503c-4b9a-ac7a-4dcd950d210f",
|
|
|
|
|
"indicator--57a8a4eb-4088-4273-9c80-4ca1950d210f",
|
|
|
|
|
"indicator--57a8a4eb-9998-4c51-88e2-45b3950d210f",
|
|
|
|
|
"indicator--57a8a4ec-64b8-4f5d-ae5a-4189950d210f",
|
|
|
|
|
"indicator--57a8a4ec-93c4-4f41-a205-4698950d210f",
|
|
|
|
|
"indicator--57a8a4ed-7c9c-4167-8f30-46c9950d210f",
|
|
|
|
|
"indicator--57a8a4ed-fe8c-4f61-a7b1-4015950d210f",
|
|
|
|
|
"indicator--57a8a4ee-06e4-4fe9-86a0-44d8950d210f",
|
|
|
|
|
"indicator--57a8a4ee-0b0c-4c93-9ee6-4ef5950d210f",
|
|
|
|
|
"indicator--57a8a4ee-f230-4d57-ad5c-4d2d950d210f",
|
|
|
|
|
"indicator--57a8a4ef-64e0-44ca-89ce-4e7f950d210f",
|
|
|
|
|
"indicator--57a8a4ef-9ef4-4608-bd9b-47ac950d210f",
|
|
|
|
|
"indicator--57a8a4ef-4178-43f5-a501-4a46950d210f",
|
|
|
|
|
"indicator--57a8a4ef-6e84-4c1f-bfd8-40ff950d210f",
|
|
|
|
|
"indicator--57a8a4f0-dadc-4eb9-b2d1-479c950d210f",
|
|
|
|
|
"indicator--57a8a4f0-4a44-4e71-b51a-4c0e950d210f",
|
|
|
|
|
"indicator--57a8a4f0-9334-4eb5-8297-498d950d210f",
|
|
|
|
|
"indicator--57a8a4f0-de18-43a5-9a60-44fe950d210f",
|
|
|
|
|
"indicator--57a8a4f1-0b38-4312-9cba-46a0950d210f",
|
|
|
|
|
"indicator--57a8a4f1-c164-4e6d-a0cf-4e13950d210f",
|
|
|
|
|
"indicator--57a8a646-e958-43a5-819e-46b8950d210f",
|
|
|
|
|
"indicator--57a8a649-3aec-45a4-8fd9-4028950d210f",
|
|
|
|
|
"indicator--57a8a64c-f588-4f1b-a385-4388950d210f",
|
|
|
|
|
"indicator--57a8a64f-1b8c-493b-9f4d-4fd5950d210f",
|
|
|
|
|
"indicator--57a8a651-c884-43a6-bef9-41d4950d210f",
|
|
|
|
|
"indicator--57a8a653-5740-4d16-9165-4256950d210f",
|
|
|
|
|
"indicator--57a8a656-d4d8-4d1d-b267-4dd1950d210f",
|
|
|
|
|
"indicator--57a8a658-11c0-443d-b8c2-460e950d210f",
|
|
|
|
|
"indicator--57a8a65b-dd30-4d7b-a3ea-4ad4950d210f",
|
|
|
|
|
"indicator--57a8a65d-eb3c-4e7e-bf6e-4e2c950d210f",
|
|
|
|
|
"indicator--57a8a660-ab30-47f4-a164-4043950d210f",
|
|
|
|
|
"indicator--57a8a662-c610-45d4-af80-4f7b950d210f",
|
|
|
|
|
"indicator--57a8a665-6734-4991-8b13-43bb950d210f",
|
|
|
|
|
"indicator--57a8a668-4c48-47d0-b480-4dba950d210f",
|
|
|
|
|
"indicator--57a8a66a-ab2c-4fba-8d87-495f950d210f",
|
|
|
|
|
"indicator--57a8a66d-66c0-477e-a4e5-4ca6950d210f",
|
|
|
|
|
"indicator--57a8a66f-7720-413f-a3cb-46ac950d210f",
|
|
|
|
|
"indicator--57a8a671-1de0-4cb7-970e-4d8e950d210f",
|
|
|
|
|
"indicator--57a8a673-2608-400f-9ddc-4497950d210f",
|
|
|
|
|
"indicator--57a8a675-39a0-4685-b914-42c5950d210f",
|
|
|
|
|
"indicator--57a8a677-7970-4781-8c66-461b950d210f",
|
|
|
|
|
"indicator--57a8a67a-a804-4715-be74-4fb4950d210f",
|
|
|
|
|
"indicator--57a8a67c-fdc0-4c85-bab7-4e69950d210f",
|
|
|
|
|
"indicator--57a8a67e-959c-4319-9a5f-44ce950d210f",
|
|
|
|
|
"indicator--57a8a680-0a30-4b72-ad55-464f950d210f",
|
|
|
|
|
"indicator--57a8a682-7e00-4b9d-9bc3-4d2b950d210f",
|
|
|
|
|
"indicator--57a8a684-88c0-438a-a1ff-4746950d210f",
|
|
|
|
|
"indicator--57a8a686-be94-4b42-b3d2-4f03950d210f",
|
|
|
|
|
"indicator--57a8a688-8b38-48b9-b96f-4181950d210f",
|
|
|
|
|
"indicator--57a8a689-ffc4-4dd0-995f-4dfa950d210f",
|
|
|
|
|
"indicator--57a8a68b-96c8-4571-a658-457c950d210f",
|
|
|
|
|
"indicator--57a8a68d-bb14-4072-a14b-4c31950d210f",
|
|
|
|
|
"indicator--57a8a68f-4bbc-40ee-89e8-4f37950d210f",
|
|
|
|
|
"indicator--57a8a691-b6bc-46b1-a50b-402d950d210f",
|
|
|
|
|
"indicator--57a8a693-1030-423b-85bb-4873950d210f",
|
|
|
|
|
"indicator--57a8a694-8364-419e-8331-4bb6950d210f",
|
|
|
|
|
"indicator--57a8a697-a0f4-481c-a0a9-437e950d210f",
|
|
|
|
|
"indicator--57a8a699-f558-49c5-8253-4c9c950d210f",
|
|
|
|
|
"indicator--57a8a69b-54d8-48ee-b1a0-478e950d210f",
|
|
|
|
|
"indicator--57a8a69d-9628-4616-8824-48f5950d210f",
|
|
|
|
|
"indicator--57a8a69f-f85c-4685-93ac-4a15950d210f",
|
|
|
|
|
"indicator--57a8a6a1-7028-450d-b41e-4948950d210f",
|
|
|
|
|
"indicator--57a8a6a2-52f0-48bf-89f3-4cfb950d210f",
|
|
|
|
|
"indicator--57a8a6a4-e0e0-4290-8401-4269950d210f",
|
|
|
|
|
"indicator--57a8a6a6-3cdc-4d3b-a275-4afe950d210f",
|
|
|
|
|
"indicator--57a8a6a8-61d4-444a-87f8-468b950d210f",
|
|
|
|
|
"indicator--57a8a6aa-c6e0-4217-b881-4057950d210f",
|
|
|
|
|
"indicator--57a8a6ac-c6bc-4c2f-97d0-4106950d210f",
|
|
|
|
|
"indicator--57a8a6ae-0bb4-445a-a7a5-46fa950d210f",
|
|
|
|
|
"indicator--57a8a6b0-485c-46d7-af63-46ad950d210f",
|
|
|
|
|
"indicator--57a8a6b2-ba50-445f-b12f-46e9950d210f",
|
|
|
|
|
"indicator--57a8a6b4-7860-4d99-8f91-4e87950d210f",
|
|
|
|
|
"indicator--57a8a6b5-8da4-4276-a165-4c7a950d210f",
|
|
|
|
|
"indicator--57a8a6b7-a7dc-4675-83a6-48cd950d210f",
|
|
|
|
|
"indicator--57a8a6b9-0c64-46fb-9bce-478c950d210f",
|
|
|
|
|
"indicator--57a8a6bb-966c-440e-a51f-4630950d210f",
|
|
|
|
|
"indicator--57a8a6bd-9de8-49db-850e-4600950d210f",
|
|
|
|
|
"indicator--57a8a6bf-3568-4b00-a50c-4dee950d210f",
|
|
|
|
|
"indicator--57a8a6c1-ab74-4233-98ca-499a950d210f",
|
|
|
|
|
"indicator--57a8a6c3-4c74-4c83-bbfc-4a0c950d210f",
|
|
|
|
|
"indicator--57a8a6c5-f53c-42d4-a8f2-49d6950d210f",
|
|
|
|
|
"indicator--57a8a6c7-1238-47c3-987c-4a01950d210f",
|
|
|
|
|
"indicator--57a8a6c8-25f8-4442-bf8f-4501950d210f",
|
|
|
|
|
"indicator--57a8a6ca-36cc-4427-9fb7-4dc9950d210f",
|
|
|
|
|
"indicator--57a8a6cc-6dcc-47a3-bfb6-4bb8950d210f",
|
|
|
|
|
"indicator--57a8a6ce-67b8-4254-9022-4ec1950d210f",
|
|
|
|
|
"indicator--57a8a6d0-e78c-49db-ae23-402d950d210f",
|
|
|
|
|
"indicator--57a8a6d2-f188-4b43-90ca-4dbb950d210f",
|
|
|
|
|
"indicator--57a8a6d3-26d0-47d5-864e-4683950d210f",
|
|
|
|
|
"indicator--57a8a6d5-79dc-491c-97ef-4e6b950d210f",
|
|
|
|
|
"indicator--57a8a6d7-3d24-4fa8-b3ef-4616950d210f",
|
|
|
|
|
"indicator--57a8a6d9-ef4c-4e54-8f8c-42c3950d210f",
|
|
|
|
|
"indicator--57a8a6db-a57c-40ee-b1c9-44ff950d210f",
|
|
|
|
|
"indicator--57a8a6dd-095c-40cc-bfce-4028950d210f",
|
|
|
|
|
"indicator--57a8a6df-3fcc-4072-939b-4e47950d210f",
|
|
|
|
|
"indicator--57a8a6e1-1c58-4903-873d-4c50950d210f",
|
|
|
|
|
"indicator--57a8a6e2-7e1c-4bb7-95cb-48a6950d210f",
|
|
|
|
|
"indicator--57a8a6e4-edf8-4434-88ca-461b950d210f",
|
|
|
|
|
"indicator--57a8a6e6-6840-4033-a5b1-4bc7950d210f",
|
|
|
|
|
"indicator--57a8a6e8-c49c-4a8c-95f7-4899950d210f",
|
|
|
|
|
"indicator--57a8a6ea-b5e4-468c-ac3f-41e2950d210f",
|
|
|
|
|
"indicator--57a8a6ec-69fc-4b10-b548-4858950d210f",
|
|
|
|
|
"indicator--57a8a6ee-954c-4fcb-be46-4b1d950d210f",
|
|
|
|
|
"indicator--57a8a6f0-a164-4c71-959d-462e950d210f",
|
|
|
|
|
"indicator--57a8a6f1-8498-4cf8-8c81-41a8950d210f",
|
|
|
|
|
"indicator--57a8a6f3-f968-4e3d-8ba5-4962950d210f",
|
|
|
|
|
"indicator--57a8a6f5-c3cc-41b7-9cca-4b2f950d210f",
|
|
|
|
|
"indicator--57a8a6f7-be3c-494e-a745-4e41950d210f",
|
|
|
|
|
"indicator--57a8a6f9-cee8-4587-a59b-45bb950d210f",
|
|
|
|
|
"indicator--57a8a6fb-d0a4-417b-b6bd-4371950d210f",
|
|
|
|
|
"indicator--57a8a6fd-7610-476e-8029-4604950d210f",
|
|
|
|
|
"indicator--57a8a6ff-5194-48c2-9504-4aab950d210f",
|
|
|
|
|
"indicator--57a8a701-cf88-457d-bb9d-4988950d210f",
|
|
|
|
|
"indicator--57a8a704-2ab4-461a-8b24-44eb950d210f",
|
|
|
|
|
"indicator--57a8a706-361c-49f3-9832-4d3d950d210f",
|
|
|
|
|
"indicator--57a8a708-a938-4439-866c-4ab7950d210f",
|
|
|
|
|
"indicator--57a8a70a-97b8-45a8-9787-435b950d210f",
|
|
|
|
|
"indicator--57a8a70b-47cc-478a-8b06-457d950d210f",
|
|
|
|
|
"indicator--57a8a70d-37c0-4984-840e-4e95950d210f",
|
|
|
|
|
"indicator--57a8a70f-9644-4816-af81-4d27950d210f",
|
|
|
|
|
"indicator--57a8a711-ad80-428f-a2ca-431e950d210f",
|
|
|
|
|
"indicator--57a8a713-a52c-4e2b-9b0d-48f4950d210f",
|
|
|
|
|
"indicator--57a8a715-e1c8-4d76-9107-4cfb950d210f",
|
|
|
|
|
"indicator--57a8a717-96c4-4dbf-bd5a-40ae950d210f",
|
|
|
|
|
"indicator--57a8a719-73fc-4f3c-b642-4cfc950d210f",
|
|
|
|
|
"indicator--57a8a71b-b9f4-4897-9c96-473a950d210f",
|
|
|
|
|
"indicator--57a8a71c-58c4-413c-ad45-49b8950d210f",
|
|
|
|
|
"indicator--57a8a71e-9ef8-4bf5-8867-413f950d210f",
|
|
|
|
|
"indicator--57a8a720-5258-473a-a623-4fcd950d210f",
|
|
|
|
|
"indicator--57a8a722-ea28-4a95-bba1-48dc950d210f",
|
|
|
|
|
"indicator--57a8a724-ebc4-4586-82fa-4112950d210f",
|
|
|
|
|
"indicator--57a8a726-20a8-483b-aa7b-41d4950d210f",
|
|
|
|
|
"indicator--57a8a728-a3d0-4270-8743-4d20950d210f",
|
|
|
|
|
"indicator--57a8a72a-4370-4b5b-8af7-41f6950d210f",
|
|
|
|
|
"indicator--57a8a72b-a0a0-46c7-a453-41eb950d210f",
|
|
|
|
|
"indicator--57a8a72d-705c-4357-b16d-4b05950d210f",
|
|
|
|
|
"indicator--57a8a730-1c38-4748-8a94-43dc950d210f",
|
|
|
|
|
"indicator--57a8a732-dbf0-480b-a4d7-49af950d210f",
|
|
|
|
|
"indicator--57a8a734-4ea0-4914-b7fb-49c3950d210f",
|
|
|
|
|
"indicator--57a8a736-7510-42c3-a2d9-4fa6950d210f",
|
|
|
|
|
"indicator--57a8a738-04d0-4c9e-b6f0-4e2a950d210f",
|
|
|
|
|
"indicator--57a8a739-1950-4b5d-a675-45ea950d210f",
|
|
|
|
|
"indicator--57a8a73c-4d9c-40be-9792-4f36950d210f",
|
|
|
|
|
"indicator--57a8a73d-b6b4-490b-a391-4995950d210f",
|
|
|
|
|
"indicator--57a8a73f-d818-40a5-ac41-4a06950d210f",
|
|
|
|
|
"indicator--57a8a741-53f4-4250-b893-4525950d210f",
|
|
|
|
|
"indicator--57a8a743-30e4-4d44-8974-484f950d210f",
|
|
|
|
|
"indicator--57a8a745-f1f0-4dbe-92c8-4696950d210f",
|
|
|
|
|
"indicator--57a8a747-8d54-4d9d-9853-4e8e950d210f",
|
|
|
|
|
"indicator--57a8a749-2264-4345-9193-4431950d210f",
|
|
|
|
|
"indicator--57a8a74b-6118-4a9d-ae4d-4291950d210f",
|
|
|
|
|
"indicator--57a8a74d-a530-449c-ae43-4ab0950d210f",
|
|
|
|
|
"indicator--57a8a74f-c708-4573-aa49-4de9950d210f",
|
|
|
|
|
"indicator--57a8a751-d33c-48ca-b238-4cf3950d210f",
|
|
|
|
|
"indicator--57a8a753-3da8-4a69-acc2-401c950d210f",
|
|
|
|
|
"indicator--57a8a754-7864-43ea-a812-4caa950d210f",
|
|
|
|
|
"indicator--57a8a756-ac88-4ade-ae9a-46d5950d210f",
|
|
|
|
|
"indicator--57a8a758-c9c8-42bb-81df-47ae950d210f",
|
|
|
|
|
"indicator--57a8a75a-29c4-41d4-850d-4be0950d210f",
|
|
|
|
|
"indicator--57a8a75c-64d4-410b-a63e-4279950d210f",
|
|
|
|
|
"indicator--57a8a75e-bab8-448a-b642-4365950d210f",
|
|
|
|
|
"indicator--57a8a760-d534-4482-aa43-403b950d210f",
|
|
|
|
|
"indicator--57a8a762-1c0c-49ab-9990-4cf7950d210f",
|
|
|
|
|
"indicator--57a8a764-e2bc-4a28-a6b4-40ad950d210f",
|
|
|
|
|
"indicator--57a8a766-ef6c-4061-8476-439a950d210f",
|
|
|
|
|
"indicator--57a8a768-3c8c-4f70-93ab-48a1950d210f",
|
|
|
|
|
"indicator--57a8a76a-8f88-4def-8d46-445b950d210f",
|
|
|
|
|
"indicator--57a8a76c-9a8c-4ea5-b305-4e3d950d210f",
|
|
|
|
|
"indicator--57a8a76e-0628-4964-a056-4b14950d210f",
|
|
|
|
|
"indicator--57a8a771-13a8-44dd-a53c-4c29950d210f",
|
|
|
|
|
"indicator--57a8a773-d694-4c6e-bb4a-4d72950d210f",
|
|
|
|
|
"indicator--57a8a775-8464-4c18-aaf3-4b0e950d210f",
|
|
|
|
|
"indicator--57a8a778-31b0-49bf-99ba-4c4d950d210f",
|
|
|
|
|
"indicator--57a8a77a-ad4c-4a3b-8f32-4374950d210f",
|
|
|
|
|
"indicator--57a8a77c-c32c-4be4-9ab8-4c24950d210f",
|
|
|
|
|
"indicator--57a8a77e-631c-4121-ac55-47f6950d210f",
|
|
|
|
|
"indicator--57a8a780-bf0c-47c9-ac63-4071950d210f",
|
|
|
|
|
"indicator--57a8a782-15a0-4a30-b86d-4a88950d210f",
|
|
|
|
|
"indicator--57a8a784-f8a4-48c9-9dcd-493b950d210f",
|
|
|
|
|
"indicator--57a8a786-a52c-463c-bd2c-42db950d210f",
|
|
|
|
|
"indicator--57a8a788-f0c4-4c13-9528-4a66950d210f",
|
|
|
|
|
"indicator--57a8a78a-7e6c-4397-b9e3-4b85950d210f",
|
|
|
|
|
"indicator--57a8a78c-06b8-4c21-94f0-4dcf950d210f",
|
|
|
|
|
"indicator--57a8a78f-1478-4a34-acb2-45ed950d210f",
|
|
|
|
|
"indicator--57a8a791-5a64-4ec9-9945-4200950d210f",
|
|
|
|
|
"indicator--57a8a793-a08c-4966-81ee-4e89950d210f",
|
|
|
|
|
"indicator--57a8a795-cb44-4101-bb0f-4af7950d210f",
|
|
|
|
|
"indicator--57a8a797-6be8-4785-a637-4d73950d210f",
|
|
|
|
|
"indicator--57a8a799-dafc-4db2-8601-4b02950d210f",
|
|
|
|
|
"indicator--57a8a79b-eab4-48bc-a361-4235950d210f",
|
|
|
|
|
"indicator--57a8a79d-6af4-4607-b153-443e950d210f",
|
|
|
|
|
"indicator--57a8a79f-59ac-4413-9eea-4256950d210f",
|
|
|
|
|
"indicator--57a8a7a1-91dc-439d-9261-4299950d210f",
|
|
|
|
|
"indicator--57a8a7a3-ccf0-45f7-b7ab-4fde950d210f",
|
|
|
|
|
"indicator--57a8a7a5-6f28-418d-b92f-4471950d210f",
|
|
|
|
|
"indicator--57a8a7a6-0904-4500-8b41-40fd950d210f",
|
|
|
|
|
"indicator--57a8a7a8-cc4c-4598-a631-4016950d210f",
|
|
|
|
|
"indicator--57a8a7aa-4fe8-4727-a6df-42ed950d210f",
|
|
|
|
|
"indicator--57a8a7ac-d3c8-4fa3-ba55-43d7950d210f",
|
|
|
|
|
"indicator--57a8a7ae-457c-46b7-b7d2-4804950d210f",
|
|
|
|
|
"indicator--57a8a7b0-515c-4da8-ab99-4fe8950d210f",
|
|
|
|
|
"indicator--57a8a7b2-0dd8-4edc-a8d6-4ec4950d210f",
|
|
|
|
|
"indicator--57a8a7b4-f3d0-4a60-bd54-4638950d210f",
|
|
|
|
|
"indicator--57a8a7b6-3ce0-4817-bd8e-45ac950d210f",
|
|
|
|
|
"indicator--57a8a7b8-2218-4ecf-8483-480a950d210f",
|
|
|
|
|
"indicator--57a8a7ba-8acc-4423-8d60-4993950d210f",
|
|
|
|
|
"indicator--57a8a7bc-8990-402d-813d-4dc3950d210f",
|
|
|
|
|
"indicator--57a8a7be-3260-4392-b2ea-497e950d210f",
|
|
|
|
|
"indicator--57a8a7c0-765c-4927-aa77-4c1c950d210f",
|
|
|
|
|
"indicator--57a8a7c2-6c70-4448-9a61-42ad950d210f",
|
|
|
|
|
"indicator--57a8a7c4-c728-421b-9292-43dd950d210f",
|
|
|
|
|
"indicator--57a8a7c6-be38-4ab6-b5dc-49ce950d210f",
|
|
|
|
|
"indicator--57a8a7c8-6e34-4dd0-97b7-46bb950d210f",
|
|
|
|
|
"indicator--57a8a7ca-93a0-45f5-8299-487b950d210f",
|
|
|
|
|
"indicator--57a8a7cc-0c80-43ab-9916-4401950d210f",
|
|
|
|
|
"indicator--57a8a7cd-40e0-4f1c-932b-414f950d210f",
|
|
|
|
|
"indicator--57a8a7cf-70a4-4d6a-9cc3-4fce950d210f",
|
|
|
|
|
"indicator--57a8a7d1-9998-459a-946b-4142950d210f",
|
|
|
|
|
"indicator--57a8a7d3-7018-47fe-bc8a-4af0950d210f",
|
|
|
|
|
"indicator--57a8a7d5-7d0c-475e-81ed-41e8950d210f",
|
|
|
|
|
"indicator--57a8a7d7-3be4-4940-9cad-4e93950d210f",
|
|
|
|
|
"indicator--57a8a7d9-0a70-4579-9904-4fcf950d210f",
|
|
|
|
|
"indicator--57a8a7db-c168-4f22-8a02-4963950d210f",
|
|
|
|
|
"indicator--57a8a7dd-ade0-4472-a4e8-40aa950d210f",
|
|
|
|
|
"indicator--57a8a7df-6bb8-4b54-86f7-4ddb950d210f",
|
|
|
|
|
"indicator--57a8a7e1-017c-4746-961c-45e7950d210f",
|
|
|
|
|
"indicator--57a8a7e3-9800-4aeb-96cd-4a06950d210f",
|
|
|
|
|
"indicator--57a8a7e5-2148-468e-ab70-4207950d210f",
|
|
|
|
|
"indicator--57a8a7e7-1490-432f-8ccf-414f950d210f",
|
|
|
|
|
"indicator--57a8a7e9-003c-45c7-950d-47b2950d210f",
|
|
|
|
|
"indicator--57a8a7eb-9b94-4925-a1be-4f85950d210f",
|
|
|
|
|
"indicator--57a8a7ed-6b3c-4a53-9196-4b89950d210f",
|
|
|
|
|
"indicator--57a8a7ef-419c-4fdb-a936-4f4d950d210f",
|
|
|
|
|
"indicator--57a8a7f0-ee8c-4614-ad3e-4dce950d210f",
|
|
|
|
|
"indicator--57a8a7f2-bd98-4f49-9730-4517950d210f",
|
|
|
|
|
"indicator--57a8a7f4-c3c8-4b4b-9c72-4754950d210f",
|
|
|
|
|
"indicator--57a8a7f6-2b48-440a-ac7c-4f3f950d210f",
|
|
|
|
|
"indicator--57a8a7f8-66dc-497a-b885-4a54950d210f",
|
|
|
|
|
"indicator--57a8a7fa-7bb0-491e-a585-43e2950d210f",
|
|
|
|
|
"indicator--57a8a7fc-8b18-424a-8769-42b0950d210f",
|
|
|
|
|
"indicator--57a8a7fe-c9ac-40a6-88c0-4c3b950d210f",
|
|
|
|
|
"indicator--57a8a648-4714-4e32-bc87-486e950d210f",
|
|
|
|
|
"indicator--57a8a64a-4764-49df-b61d-425f950d210f",
|
|
|
|
|
"indicator--57a8a64d-a07c-4180-9318-4406950d210f",
|
|
|
|
|
"indicator--57a8a64f-5258-4509-b5ab-4f71950d210f",
|
|
|
|
|
"indicator--57a8a652-d90c-4b2d-a134-4f47950d210f",
|
|
|
|
|
"indicator--57a8a654-27f8-4811-8505-4100950d210f",
|
|
|
|
|
"indicator--57a8a657-db2c-47b8-8e5a-4b9f950d210f",
|
|
|
|
|
"indicator--57a8a659-c56c-491b-a137-45fb950d210f",
|
|
|
|
|
"indicator--57a8a65c-b194-4208-9d24-4996950d210f",
|
|
|
|
|
"indicator--57a8a65e-a76c-48f0-9018-40ff950d210f",
|
|
|
|
|
"indicator--57a8a661-8ddc-4284-ae94-4169950d210f",
|
|
|
|
|
"indicator--57a8a663-0ddc-430f-b3e2-46d8950d210f",
|
|
|
|
|
"indicator--57a8a666-4678-4c2f-98e5-419c950d210f",
|
|
|
|
|
"indicator--57a8a669-5f80-4e9a-ab6f-4f16950d210f",
|
|
|
|
|
"indicator--57a8a66b-4c00-43ec-94f3-4716950d210f",
|
|
|
|
|
"indicator--57a8a66e-1774-4050-b4fc-4186950d210f",
|
|
|
|
|
"indicator--57a8a66f-9644-46e1-9ce7-47d0950d210f",
|
|
|
|
|
"indicator--57a8a672-9120-4961-a17e-4adf950d210f",
|
|
|
|
|
"indicator--57a8a674-ed74-49ca-946e-498e950d210f",
|
|
|
|
|
"indicator--57a8a676-81bc-499d-a113-4551950d210f",
|
|
|
|
|
"indicator--57a8a678-ed5c-46a8-88e8-4439950d210f",
|
|
|
|
|
"indicator--57a8a67b-8f40-4a8c-b5e6-4dfa950d210f",
|
|
|
|
|
"indicator--57a8a67d-ec50-4837-a3cc-4681950d210f",
|
|
|
|
|
"indicator--57a8a67f-98c0-49de-826e-4c34950d210f",
|
|
|
|
|
"indicator--57a8a681-1a48-4817-97cd-4e30950d210f",
|
|
|
|
|
"indicator--57a8a682-aad0-413c-8c3a-4af9950d210f",
|
|
|
|
|
"indicator--57a8a684-b4d4-46f5-92ec-4cdd950d210f",
|
|
|
|
|
"indicator--57a8a686-96c4-485c-9aa6-4a9e950d210f",
|
|
|
|
|
"indicator--57a8a688-9548-49e9-8e79-43b6950d210f",
|
|
|
|
|
"indicator--57a8a68a-4960-4aef-ba32-44ae950d210f",
|
|
|
|
|
"indicator--57a8a68c-746c-47d6-9bb4-4a73950d210f",
|
|
|
|
|
"indicator--57a8a68e-f7f4-48e0-8b33-4fbf950d210f",
|
|
|
|
|
"indicator--57a8a690-cbdc-446d-8793-4588950d210f",
|
|
|
|
|
"indicator--57a8a691-1e64-4e08-8920-43ce950d210f",
|
|
|
|
|
"indicator--57a8a693-6624-4e8f-965f-4300950d210f",
|
|
|
|
|
"indicator--57a8a695-e8a4-4209-964d-44fd950d210f",
|
|
|
|
|
"indicator--57a8a698-e268-485c-95ac-47c3950d210f",
|
|
|
|
|
"indicator--57a8a699-2d20-4fbf-8924-40ec950d210f",
|
|
|
|
|
"indicator--57a8a69b-a3d8-4231-a64c-47e8950d210f",
|
|
|
|
|
"indicator--57a8a69e-4e84-4f9b-9a73-471b950d210f",
|
|
|
|
|
"indicator--57a8a69f-efc8-4bb8-b5bd-4d9a950d210f",
|
|
|
|
|
"indicator--57a8a6a1-5b98-4f61-87fd-452a950d210f",
|
|
|
|
|
"indicator--57a8a6a3-5a6c-4f3d-bee4-4585950d210f",
|
|
|
|
|
"indicator--57a8a6a5-cd60-4350-8c1b-4dba950d210f",
|
|
|
|
|
"indicator--57a8a6a7-5b24-4b37-b0e6-41a3950d210f",
|
|
|
|
|
"indicator--57a8a6a9-f854-414c-b369-4903950d210f",
|
|
|
|
|
"indicator--57a8a6ab-12e0-4dbb-bb08-4e94950d210f",
|
|
|
|
|
"indicator--57a8a6ad-574c-40e0-989c-48a5950d210f",
|
|
|
|
|
"indicator--57a8a6af-ad1c-4bc7-bdd0-4086950d210f",
|
|
|
|
|
"indicator--57a8a6b1-3208-40f6-aa8a-478e950d210f",
|
|
|
|
|
"indicator--57a8a6b2-7534-492f-8428-4aee950d210f",
|
|
|
|
|
"indicator--57a8a6b4-f63c-4fa2-b51e-4e6b950d210f",
|
|
|
|
|
"indicator--57a8a6b6-fb48-4af2-b348-483f950d210f",
|
|
|
|
|
"indicator--57a8a6b8-e4c0-4f20-9383-4326950d210f",
|
|
|
|
|
"indicator--57a8a6ba-1ac4-4fcb-ad83-4dd3950d210f",
|
|
|
|
|
"indicator--57a8a6bc-d81c-46db-8786-40b9950d210f",
|
|
|
|
|
"indicator--57a8a6be-8ec8-4249-ab15-47cf950d210f",
|
|
|
|
|
"indicator--57a8a6c0-07d8-4c3b-8147-43e7950d210f",
|
|
|
|
|
"indicator--57a8a6c1-e8f8-4739-9551-4da5950d210f",
|
|
|
|
|
"indicator--57a8a6c4-7644-42d5-9aec-4b4a950d210f",
|
|
|
|
|
"indicator--57a8a6c5-e470-4ce4-986c-472c950d210f",
|
|
|
|
|
"indicator--57a8a6c7-d348-4a0c-b6b5-451f950d210f",
|
|
|
|
|
"indicator--57a8a6c9-b6c4-460f-aec8-4ba2950d210f",
|
|
|
|
|
"indicator--57a8a6cb-3b5c-4d5b-8b69-441f950d210f",
|
|
|
|
|
"indicator--57a8a6cd-f5ec-4f5b-a9c8-4432950d210f",
|
|
|
|
|
"indicator--57a8a6ce-9658-47b0-b7c5-40e3950d210f",
|
|
|
|
|
"indicator--57a8a6d0-81e0-448a-a75f-4f1e950d210f",
|
|
|
|
|
"indicator--57a8a6d2-cf44-4db5-8061-4a0c950d210f",
|
|
|
|
|
"indicator--57a8a6d4-0368-41da-99ac-4d11950d210f",
|
|
|
|
|
"indicator--57a8a6d6-c580-492e-9bfe-4497950d210f",
|
|
|
|
|
"indicator--57a8a6d8-c2d0-4842-9d23-4772950d210f",
|
|
|
|
|
"indicator--57a8a6da-e264-4fdb-8c40-455e950d210f",
|
|
|
|
|
"indicator--57a8a6dc-11d4-42da-8370-40f5950d210f",
|
|
|
|
|
"indicator--57a8a6dd-9e8c-4229-bcdb-4365950d210f",
|
|
|
|
|
"indicator--57a8a6df-20cc-4aa8-b95c-4c24950d210f",
|
|
|
|
|
"indicator--57a8a6e1-69d0-4833-ae61-4450950d210f",
|
|
|
|
|
"indicator--57a8a6e3-ac90-4d6f-9e09-4e66950d210f",
|
|
|
|
|
"indicator--57a8a6e5-e870-46a9-9538-42d7950d210f",
|
|
|
|
|
"indicator--57a8a6e7-f9c8-40e8-a557-4b1f950d210f",
|
|
|
|
|
"indicator--57a8a6e9-1ec0-4dd0-aa90-4c1c950d210f",
|
|
|
|
|
"indicator--57a8a6ea-9e50-43d6-911b-42fa950d210f",
|
|
|
|
|
"indicator--57a8a6ed-ce08-4907-9a53-481b950d210f",
|
|
|
|
|
"indicator--57a8a6ee-f920-4b64-9634-44f9950d210f",
|
|
|
|
|
"indicator--57a8a6f0-ffc0-435e-a68d-421f950d210f",
|
|
|
|
|
"indicator--57a8a6f2-61d4-4f94-a281-4cd6950d210f",
|
|
|
|
|
"indicator--57a8a6f4-adfc-4b09-a80e-45fd950d210f",
|
|
|
|
|
"indicator--57a8a6f6-d0d4-46c2-aa95-4ac1950d210f",
|
|
|
|
|
"indicator--57a8a6f8-6b4c-4f40-a761-4d2a950d210f",
|
|
|
|
|
"indicator--57a8a6fa-ad30-4b02-a920-43ea950d210f",
|
|
|
|
|
"indicator--57a8a6fc-3818-474f-a02e-486b950d210f",
|
|
|
|
|
"indicator--57a8a6fe-0214-4186-812d-4f34950d210f",
|
|
|
|
|
"indicator--57a8a700-00d0-4964-936e-4ad3950d210f",
|
|
|
|
|
"indicator--57a8a702-a21c-4ac0-9e3f-4dca950d210f",
|
|
|
|
|
"indicator--57a8a705-5814-437d-865a-4fc5950d210f",
|
|
|
|
|
"indicator--57a8a706-c62c-42a1-bdd3-4573950d210f",
|
|
|
|
|
"indicator--57a8a708-4d2c-4fae-9880-4698950d210f",
|
|
|
|
|
"indicator--57a8a70a-ba9c-48e6-90ca-4cf9950d210f",
|
|
|
|
|
"indicator--57a8a70c-c140-4292-ad32-4d9f950d210f",
|
|
|
|
|
"indicator--57a8a70e-861c-40b4-8236-45d7950d210f",
|
|
|
|
|
"indicator--57a8a710-bf18-4eac-a459-466e950d210f",
|
|
|
|
|
"indicator--57a8a712-85b8-4922-8ee7-4d9a950d210f",
|
|
|
|
|
"indicator--57a8a714-67bc-4bdd-8318-4b62950d210f",
|
|
|
|
|
"indicator--57a8a716-b47c-4d35-aef0-49f5950d210f",
|
|
|
|
|
"indicator--57a8a717-20ec-4990-942c-44cc950d210f",
|
|
|
|
|
"indicator--57a8a719-a114-4edf-a682-42ba950d210f",
|
|
|
|
|
"indicator--57a8a71b-82d0-4160-9608-455b950d210f",
|
|
|
|
|
"indicator--57a8a71d-7b50-49de-ba8f-42ac950d210f",
|
|
|
|
|
"indicator--57a8a71f-3828-49ea-b545-4b8e950d210f",
|
|
|
|
|
"indicator--57a8a721-d0a4-46d5-a817-43c2950d210f",
|
|
|
|
|
"indicator--57a8a723-8408-4ad9-af27-4b51950d210f",
|
|
|
|
|
"indicator--57a8a725-9cfc-43e0-955a-4396950d210f",
|
|
|
|
|
"indicator--57a8a727-1b68-49c8-9cc6-4f09950d210f",
|
|
|
|
|
"indicator--57a8a729-24e8-49fe-948c-42fa950d210f",
|
|
|
|
|
"indicator--57a8a72a-d8ec-4da4-93d4-462f950d210f",
|
|
|
|
|
"indicator--57a8a72c-5160-454a-9886-4eba950d210f",
|
|
|
|
|
"indicator--57a8a72e-2344-42ce-aec6-4adb950d210f",
|
|
|
|
|
"indicator--57a8a730-0280-40bc-a87e-487c950d210f",
|
|
|
|
|
"indicator--57a8a733-04e4-4ab5-8d83-4a97950d210f",
|
|
|
|
|
"indicator--57a8a734-03cc-4dfa-a387-4bb9950d210f",
|
|
|
|
|
"indicator--57a8a736-7e70-4e0b-b077-46f8950d210f",
|
|
|
|
|
"indicator--57a8a738-52f0-4382-95c5-4ec9950d210f",
|
|
|
|
|
"indicator--57a8a73a-a064-42c2-a632-4570950d210f",
|
|
|
|
|
"indicator--57a8a73c-83c8-454a-8abc-4529950d210f",
|
|
|
|
|
"indicator--57a8a73e-0628-40d8-a7f2-4ac4950d210f",
|
|
|
|
|
"indicator--57a8a740-f3c4-4fa9-bd91-494a950d210f",
|
|
|
|
|
"indicator--57a8a742-9898-4d69-8e8e-446d950d210f",
|
|
|
|
|
"indicator--57a8a744-739c-4bc4-8c87-44bb950d210f",
|
|
|
|
|
"indicator--57a8a746-faa4-4f4a-b9b0-4d98950d210f",
|
|
|
|
|
"indicator--57a8a748-3d14-42f7-90bd-4804950d210f",
|
|
|
|
|
"indicator--57a8a749-6b24-4d8f-b44b-4793950d210f",
|
|
|
|
|
"indicator--57a8a74c-a814-48b6-ab49-450b950d210f",
|
|
|
|
|
"indicator--57a8a74d-626c-4871-87fa-4253950d210f",
|
|
|
|
|
"indicator--57a8a750-24f0-4e58-9311-419d950d210f",
|
|
|
|
|
"indicator--57a8a751-e0e4-463a-a47d-49e6950d210f",
|
|
|
|
|
"indicator--57a8a753-2408-4c7a-878e-43e7950d210f",
|
|
|
|
|
"indicator--57a8a755-08a8-47e3-8536-42e4950d210f",
|
|
|
|
|
"indicator--57a8a757-f060-46d9-9659-4e5b950d210f",
|
|
|
|
|
"indicator--57a8a759-b3a8-4087-a5af-4cc3950d210f",
|
|
|
|
|
"indicator--57a8a75b-121c-423d-b3a3-47bc950d210f",
|
|
|
|
|
"indicator--57a8a75d-b448-4da0-b6e3-4783950d210f",
|
|
|
|
|
"indicator--57a8a75f-97d4-44a1-8a71-4b13950d210f",
|
|
|
|
|
"indicator--57a8a760-7a68-4527-b2b6-4156950d210f",
|
|
|
|
|
"indicator--57a8a762-4d18-43e4-b41a-4c87950d210f",
|
|
|
|
|
"indicator--57a8a764-4f70-46be-89d9-4c51950d210f",
|
|
|
|
|
"indicator--57a8a767-5d04-4150-83e1-4939950d210f",
|
|
|
|
|
"indicator--57a8a769-8984-474e-b6de-44b5950d210f",
|
|
|
|
|
"indicator--57a8a76b-2950-4d82-86f3-421e950d210f",
|
|
|
|
|
"indicator--57a8a76d-2904-4de1-ab57-41f3950d210f",
|
|
|
|
|
"indicator--57a8a76f-d28c-467a-9921-43a1950d210f",
|
|
|
|
|
"indicator--57a8a771-d528-4c51-8ee8-404a950d210f",
|
|
|
|
|
"indicator--57a8a774-bbd4-45e1-8b5e-41e3950d210f",
|
|
|
|
|
"indicator--57a8a776-6788-422d-afa4-45e1950d210f",
|
|
|
|
|
"indicator--57a8a778-29f8-44d5-bd2c-4b6f950d210f",
|
|
|
|
|
"indicator--57a8a77b-2eec-4888-90af-4cdd950d210f",
|
|
|
|
|
"indicator--57a8a77d-e868-47af-8233-4dde950d210f",
|
|
|
|
|
"indicator--57a8a77f-4c48-430b-9590-45f3950d210f",
|
|
|
|
|
"indicator--57a8a781-b01c-463b-b7f4-40d0950d210f",
|
|
|
|
|
"indicator--57a8a783-a92c-4fd4-bcde-4f24950d210f",
|
|
|
|
|
"indicator--57a8a785-bb34-4242-a737-439b950d210f",
|
|
|
|
|
"indicator--57a8a787-64f0-405f-aa89-4cc7950d210f",
|
|
|
|
|
"indicator--57a8a789-aa30-405e-b761-4b87950d210f",
|
|
|
|
|
"indicator--57a8a78b-46f0-433b-b3ae-4319950d210f",
|
|
|
|
|
"indicator--57a8a78e-182c-4265-89c1-47b0950d210f",
|
|
|
|
|
"indicator--57a8a790-4e3c-4886-bba7-4896950d210f",
|
|
|
|
|
"indicator--57a8a792-5bdc-444c-9c06-4f4a950d210f",
|
|
|
|
|
"indicator--57a8a794-f174-40b2-a283-4481950d210f",
|
|
|
|
|
"indicator--57a8a796-1228-4175-bf87-43ab950d210f",
|
|
|
|
|
"indicator--57a8a798-7d34-473c-a32c-4792950d210f",
|
|
|
|
|
"indicator--57a8a79a-fd64-437f-9ae1-43fb950d210f",
|
|
|
|
|
"indicator--57a8a79b-d5a8-45a9-a282-4de0950d210f",
|
|
|
|
|
"indicator--57a8a79e-0410-48dc-9e73-4737950d210f",
|
|
|
|
|
"indicator--57a8a79f-3a98-4cd6-9db8-4334950d210f",
|
|
|
|
|
"indicator--57a8a7a1-4ec0-4134-801c-4e8f950d210f",
|
|
|
|
|
"indicator--57a8a7a3-f80c-48c3-80f8-4740950d210f",
|
|
|
|
|
"indicator--57a8a7a5-2e78-4cf6-ab21-42e1950d210f",
|
|
|
|
|
"indicator--57a8a7a7-da9c-4203-bbb9-42dc950d210f",
|
|
|
|
|
"indicator--57a8a7a9-3410-4422-9f21-4707950d210f",
|
|
|
|
|
"indicator--57a8a7ab-0bec-4282-ad3b-4f3a950d210f",
|
|
|
|
|
"indicator--57a8a7ad-9e70-4671-b46f-47e3950d210f",
|
|
|
|
|
"indicator--57a8a7af-fa78-4779-8565-4e9d950d210f",
|
|
|
|
|
"indicator--57a8a7b1-8498-4b9d-ad09-4d3f950d210f",
|
|
|
|
|
"indicator--57a8a7b3-d958-45b2-b7cc-452b950d210f",
|
|
|
|
|
"indicator--57a8a7b5-d128-499d-9b9a-4b1b950d210f",
|
|
|
|
|
"indicator--57a8a7b6-3c68-4562-b3bd-428d950d210f",
|
|
|
|
|
"indicator--57a8a7b8-1d94-43bc-b8d6-484e950d210f",
|
|
|
|
|
"indicator--57a8a7ba-c0b0-4e9c-bf9e-43dc950d210f",
|
|
|
|
|
"indicator--57a8a7bc-1d38-4d75-836e-47d6950d210f",
|
|
|
|
|
"indicator--57a8a7be-6998-43d6-903c-4a1c950d210f",
|
|
|
|
|
"indicator--57a8a7c0-0b44-484c-80a5-4d6b950d210f",
|
|
|
|
|
"indicator--57a8a7c2-f258-48a2-90d5-42ac950d210f",
|
|
|
|
|
"indicator--57a8a7c5-1470-4589-8506-4d88950d210f",
|
|
|
|
|
"indicator--57a8a7c6-29a8-4937-b460-4b2d950d210f",
|
|
|
|
|
"indicator--57a8a7c8-ab20-447c-8de3-4de6950d210f",
|
|
|
|
|
"indicator--57a8a7ca-272c-46e8-bfaf-48ef950d210f",
|
|
|
|
|
"indicator--57a8a7cc-1194-456b-89a9-450d950d210f",
|
|
|
|
|
"indicator--57a8a7ce-bbd0-4c12-b2d1-4db9950d210f",
|
|
|
|
|
"indicator--57a8a7d0-7128-410d-8c60-498a950d210f",
|
|
|
|
|
"indicator--57a8a7d2-d948-41e0-beab-4241950d210f",
|
|
|
|
|
"indicator--57a8a7d4-752c-40f5-b444-48e6950d210f",
|
|
|
|
|
"indicator--57a8a7d6-36d4-452f-bae1-44a4950d210f",
|
|
|
|
|
"indicator--57a8a7d8-b5b8-4352-9439-4e53950d210f",
|
|
|
|
|
"indicator--57a8a7da-8d3c-44f6-b415-403e950d210f",
|
|
|
|
|
"indicator--57a8a7dc-b69c-4479-9f01-4b73950d210f",
|
|
|
|
|
"indicator--57a8a7dd-7150-4768-80c9-4c0b950d210f",
|
|
|
|
|
"indicator--57a8a7df-c064-4bca-a4b4-4525950d210f",
|
|
|
|
|
"indicator--57a8a7e1-ca24-492a-b4e7-4b38950d210f",
|
|
|
|
|
"indicator--57a8a7e4-5b70-459a-b770-49b0950d210f",
|
|
|
|
|
"indicator--57a8a7e5-a4b4-4dd6-b80e-4cfa950d210f",
|
|
|
|
|
"indicator--57a8a7e7-54ec-40d0-86c6-47b6950d210f",
|
|
|
|
|
"indicator--57a8a7e9-5c44-4d7e-a801-4b34950d210f",
|
|
|
|
|
"indicator--57a8a7eb-dc50-44f5-894b-4cb6950d210f",
|
|
|
|
|
"indicator--57a8a7ed-4644-4277-872e-40e2950d210f",
|
|
|
|
|
"indicator--57a8a7ef-e104-4839-92e5-4d34950d210f",
|
|
|
|
|
"indicator--57a8a7f1-d370-4190-aa23-4e58950d210f",
|
|
|
|
|
"indicator--57a8a7f3-f2b8-4d33-884e-4f40950d210f",
|
|
|
|
|
"indicator--57a8a7f5-9218-4f4b-9a6c-434b950d210f",
|
|
|
|
|
"indicator--57a8a7f7-8ec4-4478-b3cd-49f6950d210f",
|
|
|
|
|
"indicator--57a8a7f9-d79c-4acd-902a-437d950d210f",
|
|
|
|
|
"indicator--57a8a7fb-a26c-4e26-833f-4aed950d210f",
|
|
|
|
|
"indicator--57a8a7fd-ae90-4553-b5cf-4588950d210f",
|
|
|
|
|
"indicator--57a8a7ff-a488-46f7-b173-4346950d210f",
|
|
|
|
|
"indicator--57a8a800-6538-4fc9-ad18-4f11950d210f",
|
|
|
|
|
"indicator--57a8a802-56c4-493c-aa5c-49de950d210f",
|
|
|
|
|
"indicator--57a8a804-c3a4-4456-973b-4e1b950d210f",
|
|
|
|
|
"indicator--57a8a807-a344-4d9f-9afb-4050950d210f",
|
|
|
|
|
"indicator--57a8a80a-1b58-4ed1-a93d-4c41950d210f",
|
|
|
|
|
"indicator--57a8a80c-a538-4e92-a0c1-4b8b950d210f",
|
|
|
|
|
"indicator--57a8a80f-c068-4a6f-be8a-40db950d210f",
|
|
|
|
|
"indicator--57a8a811-734c-40c2-82b6-41cb950d210f",
|
|
|
|
|
"indicator--57a8a814-b4fc-4eb1-8434-4ecb950d210f",
|
|
|
|
|
"indicator--57a8a816-7e50-4294-b34c-4061950d210f",
|
|
|
|
|
"indicator--57a8a819-f3f4-4a5f-aa25-4d08950d210f",
|
|
|
|
|
"indicator--57a8a81b-992c-4aac-9d64-47d0950d210f",
|
|
|
|
|
"indicator--57a8a81e-9598-4220-81a9-409d950d210f",
|
|
|
|
|
"indicator--57a8a820-8c20-48a3-9b87-4f74950d210f",
|
|
|
|
|
"indicator--57a8a823-8d60-4dfb-b65f-4be2950d210f",
|
|
|
|
|
"indicator--57a8a826-bc08-4389-ad6d-42e9950d210f",
|
|
|
|
|
"indicator--57a8a829-6f98-4f4d-9ef9-4f37950d210f",
|
|
|
|
|
"indicator--57a8a82b-8714-4c80-908d-4d39950d210f",
|
|
|
|
|
"indicator--57a8a82e-992c-46bb-9b0a-419b950d210f",
|
|
|
|
|
"indicator--57a8a831-4924-4c78-871e-4a9c950d210f",
|
|
|
|
|
"indicator--57a8a833-1b7c-4aae-86e4-4516950d210f",
|
|
|
|
|
"indicator--57a8a836-1818-4613-9726-49a1950d210f",
|
|
|
|
|
"indicator--57a8a839-1130-477f-9d1a-4acd950d210f",
|
|
|
|
|
"indicator--57a8a83b-1090-4ce2-bf34-4d95950d210f",
|
|
|
|
|
"indicator--57a8a83e-6ffc-47d7-9122-444d950d210f",
|
|
|
|
|
"indicator--57a8a840-f250-48e0-a5ee-41cd950d210f",
|
|
|
|
|
"indicator--57a8a843-7db8-437b-92ef-41d5950d210f",
|
|
|
|
|
"indicator--57a8a845-bbe0-489f-9bc0-4ce3950d210f",
|
|
|
|
|
"indicator--57a8a848-5240-46d9-89b9-43ae950d210f",
|
|
|
|
|
"indicator--57a8a84a-336c-4288-aafb-4d11950d210f",
|
|
|
|
|
"indicator--57a8a84d-d3ac-4693-b0e2-4780950d210f",
|
|
|
|
|
"indicator--57a8a850-1314-45f2-bf9e-4107950d210f",
|
|
|
|
|
"indicator--57a8a852-04f8-4726-bd96-4bdc950d210f",
|
|
|
|
|
"indicator--57a8a855-cef4-42f3-a31f-4859950d210f",
|
|
|
|
|
"indicator--57a8a857-4064-400a-8f9e-42f2950d210f",
|
|
|
|
|
"indicator--57a8a85a-2948-48b4-9fe5-466f950d210f",
|
|
|
|
|
"indicator--57a8a85c-d360-4253-b7f2-494c950d210f",
|
|
|
|
|
"indicator--57a8a85f-11e0-459f-ad59-4140950d210f",
|
|
|
|
|
"indicator--57a8a862-f6e4-4333-941d-421c950d210f",
|
|
|
|
|
"indicator--57a8a864-bd84-4c62-b52a-4738950d210f",
|
|
|
|
|
"indicator--57a8a866-690c-4baf-a5e7-47e8950d210f",
|
|
|
|
|
"indicator--57a8a868-4960-4fd3-88b1-4fcf950d210f",
|
|
|
|
|
"indicator--57a8a86a-e920-401f-8397-4405950d210f",
|
|
|
|
|
"indicator--57a8a86c-5198-413a-b6ed-4d84950d210f",
|
|
|
|
|
"indicator--57a8a86e-5008-4dc4-8db9-42c5950d210f",
|
|
|
|
|
"indicator--57a8a870-d650-4b0b-940a-4178950d210f",
|
|
|
|
|
"indicator--57a8a872-ff08-4063-a1da-4287950d210f",
|
|
|
|
|
"indicator--57a8a874-8f20-4812-a0e4-4c35950d210f",
|
|
|
|
|
"indicator--57a8a876-aa7c-4794-a99f-4293950d210f",
|
|
|
|
|
"indicator--57a8a878-77f0-4bac-91a2-4688950d210f",
|
|
|
|
|
"indicator--57a8a87a-131c-4750-affd-45e4950d210f",
|
|
|
|
|
"indicator--57a8a87c-0de0-4c73-883f-4dc0950d210f",
|
|
|
|
|
"indicator--57a8a87e-080c-4dfa-8cda-4197950d210f",
|
|
|
|
|
"indicator--57a8a880-dccc-462a-a049-46eb950d210f",
|
|
|
|
|
"indicator--57a8a882-5824-4edf-9317-44ef950d210f",
|
|
|
|
|
"indicator--57a8a883-da58-4a72-9697-4aba950d210f",
|
|
|
|
|
"indicator--57a8a885-81b4-4484-87ac-4e8a950d210f",
|
|
|
|
|
"indicator--57a8a887-9ef0-4471-b6df-4b92950d210f",
|
|
|
|
|
"indicator--57a8a889-0bf8-4c46-a316-4f17950d210f",
|
|
|
|
|
"indicator--57a8a88b-b230-4623-bbf1-47d3950d210f",
|
|
|
|
|
"indicator--57a8a88d-324c-4f82-8132-4f51950d210f",
|
|
|
|
|
"indicator--57a8a88f-06d0-4902-98d4-4522950d210f",
|
|
|
|
|
"indicator--57a8a891-a7ec-4f18-b9b0-4cd5950d210f",
|
|
|
|
|
"indicator--57a8a893-13e0-4f34-af3f-4e9f950d210f",
|
|
|
|
|
"indicator--57a8a895-d838-4ff3-9c46-4afc950d210f",
|
|
|
|
|
"indicator--57a8a897-1604-4609-a3a2-4685950d210f",
|
|
|
|
|
"indicator--57a8a899-8708-44fa-86ef-4d98950d210f",
|
|
|
|
|
"indicator--57a8a89b-815c-4bb7-aa2b-4f6e950d210f",
|
|
|
|
|
"indicator--57a8a89d-1f60-4edb-b5e1-4946950d210f",
|
|
|
|
|
"indicator--57a8a8a0-2b48-4d22-8885-4990950d210f",
|
|
|
|
|
"indicator--57a8a8a2-cbb8-47e2-ad1b-4117950d210f",
|
|
|
|
|
"indicator--57a8a8a4-f4d4-4d04-acb6-4d56950d210f",
|
|
|
|
|
"indicator--57a8a8a6-6088-44a1-9440-402d950d210f",
|
|
|
|
|
"indicator--57a8a8a8-3e00-41ac-91b2-4877950d210f",
|
|
|
|
|
"indicator--57a8a8aa-8e14-454d-9ed6-42ad950d210f",
|
|
|
|
|
"indicator--57a8a8ac-7acc-4387-acd0-4949950d210f",
|
|
|
|
|
"indicator--57a8a8ae-21d0-4189-9ee9-4a51950d210f",
|
|
|
|
|
"indicator--57a8a8b0-bb6c-4be8-b14c-4616950d210f",
|
|
|
|
|
"indicator--57a8a8b3-43f4-4962-b3e8-4da8950d210f",
|
|
|
|
|
"indicator--57a8a8b4-9d88-402f-8236-4b0a950d210f",
|
|
|
|
|
"indicator--57a8a8b7-e95c-48d0-8d7b-4b8d950d210f",
|
|
|
|
|
"indicator--57a8a8b8-2564-4fc3-afce-4845950d210f",
|
|
|
|
|
"indicator--57a8a8bb-a088-458f-897c-401f950d210f",
|
|
|
|
|
"indicator--57a8a8bd-0a20-4ab7-b57f-4505950d210f",
|
|
|
|
|
"indicator--57a8a8be-9bbc-47b1-9873-4fd9950d210f",
|
|
|
|
|
"indicator--57a8a8c0-e7fc-44ef-b2c4-4d93950d210f",
|
|
|
|
|
"indicator--57a8a8c2-3e48-4b97-bf9a-4dd8950d210f",
|
|
|
|
|
"indicator--57a8a8c4-cb48-4828-b8c9-41af950d210f",
|
|
|
|
|
"indicator--57a8a8c7-ef58-49e8-abcd-4729950d210f",
|
|
|
|
|
"indicator--57a8a8c9-ea84-401b-b77a-4fae950d210f",
|
|
|
|
|
"indicator--57a8a8cb-f914-44f7-baea-4c98950d210f",
|
|
|
|
|
"indicator--57a8a8cc-b9a0-43ed-974b-4e43950d210f",
|
|
|
|
|
"indicator--57a8a8cf-8208-42c8-818e-40fc950d210f",
|
|
|
|
|
"indicator--57a8a8d2-48c4-4018-bc43-40ec950d210f",
|
|
|
|
|
"indicator--57a8a8d4-68ec-4215-bf24-4810950d210f",
|
|
|
|
|
"indicator--57a8a8d7-0e80-4867-9d78-4646950d210f",
|
|
|
|
|
"indicator--57a8a8d9-e8e8-4fe6-bb22-4f83950d210f",
|
|
|
|
|
"indicator--57a8a8db-8808-4e06-a6b2-47ae950d210f",
|
|
|
|
|
"indicator--57a8a8de-0688-425d-9366-498a950d210f",
|
|
|
|
|
"indicator--57a8a8e0-baa4-4e29-abed-4750950d210f",
|
|
|
|
|
"indicator--57a8a8e2-fd58-4a0b-b7cf-407b950d210f",
|
|
|
|
|
"indicator--57a8a8e5-0ab0-467d-b2ae-4560950d210f",
|
|
|
|
|
"indicator--57a8a8e7-05d0-451c-bd32-4596950d210f",
|
|
|
|
|
"indicator--57a8a8e9-d23c-4ac9-a50f-4b39950d210f",
|
|
|
|
|
"indicator--57a8a8eb-90ac-44a4-b6c1-4b5d950d210f",
|
|
|
|
|
"indicator--57a8a8ed-52bc-4720-bc32-4893950d210f",
|
|
|
|
|
"indicator--57a8a8ef-3cf8-4458-9469-4941950d210f",
|
|
|
|
|
"indicator--57a8a8f1-a9e4-40d7-b61b-4cbb950d210f",
|
|
|
|
|
"indicator--57a8a8f3-1220-41db-b42c-4daf950d210f",
|
|
|
|
|
"indicator--57a8a8f6-4f44-4005-abcd-46c7950d210f",
|
|
|
|
|
"indicator--57a8a8f8-8618-475c-90cf-4585950d210f",
|
|
|
|
|
"indicator--57a8a8fa-ffe8-4f70-9379-4f94950d210f",
|
|
|
|
|
"indicator--57a8a8fc-ee14-4894-877f-4cda950d210f",
|
|
|
|
|
"indicator--57a8a8fe-215c-4d51-af43-4c85950d210f",
|
|
|
|
|
"indicator--57a8a900-1a74-4f48-b8a9-45b6950d210f",
|
|
|
|
|
"indicator--57a8a902-0db0-4528-83c3-4444950d210f",
|
|
|
|
|
"indicator--57a8a904-106c-490c-b669-4edb950d210f",
|
|
|
|
|
"indicator--57a8a906-e050-4e22-a4b8-48b9950d210f",
|
|
|
|
|
"indicator--57a8a908-4f5c-4717-9c22-4ee5950d210f",
|
|
|
|
|
"indicator--57a8a90a-9ad8-4ad2-84b8-4c3e950d210f",
|
|
|
|
|
"indicator--57a8a90c-5410-4707-94c2-4f91950d210f",
|
|
|
|
|
"indicator--57a8a90e-7860-495d-9bc7-4997950d210f",
|
|
|
|
|
"indicator--57a8a911-a3ac-4d48-99b4-4e52950d210f",
|
|
|
|
|
"indicator--57a8a913-03c4-4c57-90df-4211950d210f",
|
|
|
|
|
"indicator--57a8a915-881c-4175-b31f-48e4950d210f",
|
|
|
|
|
"indicator--57a8a917-7e2c-4f56-9b8b-4da3950d210f",
|
|
|
|
|
"indicator--57a8a919-bdf8-4937-b47e-41f7950d210f",
|
|
|
|
|
"indicator--57a8a91b-013c-4e3a-886e-4fb0950d210f",
|
|
|
|
|
"indicator--57a8a91d-ec1c-43ea-a5da-4a12950d210f",
|
|
|
|
|
"indicator--57a8a91f-22f0-4580-aa05-4ee2950d210f",
|
|
|
|
|
"indicator--57a8a922-6868-4c3e-abad-4483950d210f",
|
|
|
|
|
"indicator--57a8a801-40ac-4de8-b2c9-4573950d210f",
|
|
|
|
|
"indicator--57a8a803-e184-4ae7-99bc-486f950d210f",
|
|
|
|
|
"indicator--57a8a805-9a78-4ac4-b4bb-4eca950d210f",
|
|
|
|
|
"indicator--57a8a808-5a48-4134-bf6f-4056950d210f",
|
|
|
|
|
"indicator--57a8a80b-4b34-4b32-b108-40ac950d210f",
|
|
|
|
|
"indicator--57a8a80d-824c-47e9-8f66-4887950d210f",
|
|
|
|
|
"indicator--57a8a80f-e594-4def-9f86-4841950d210f",
|
|
|
|
|
"indicator--57a8a812-e120-47d5-b1e4-454a950d210f",
|
|
|
|
|
"indicator--57a8a815-599c-4a17-b5e0-4911950d210f",
|
|
|
|
|
"indicator--57a8a817-9b2c-4fee-9011-4943950d210f",
|
|
|
|
|
"indicator--57a8a81a-f6b4-4126-baba-4b92950d210f",
|
|
|
|
|
"indicator--57a8a81c-5ab4-4431-b3c0-493a950d210f",
|
|
|
|
|
"indicator--57a8a81f-b0bc-4376-bf08-4c02950d210f",
|
|
|
|
|
"indicator--57a8a821-24b8-4175-914b-4a14950d210f",
|
|
|
|
|
"indicator--57a8a824-1830-4901-907c-4332950d210f",
|
|
|
|
|
"indicator--57a8a827-88a4-4218-89be-4041950d210f",
|
|
|
|
|
"indicator--57a8a82a-053c-4d23-8af4-4efc950d210f",
|
|
|
|
|
"indicator--57a8a82c-5418-4bb5-9438-43c4950d210f",
|
|
|
|
|
"indicator--57a8a82f-f5d4-4ef4-9f42-452c950d210f",
|
|
|
|
|
"indicator--57a8a832-e000-47a2-9b7b-4f8e950d210f",
|
|
|
|
|
"indicator--57a8a834-f058-4f38-a0b0-463b950d210f",
|
|
|
|
|
"indicator--57a8a837-2f40-4994-8246-483f950d210f",
|
|
|
|
|
"indicator--57a8a83a-ef4c-4a73-8a45-4c0c950d210f",
|
|
|
|
|
"indicator--57a8a83d-cb0c-4d11-bc71-4ce8950d210f",
|
|
|
|
|
"indicator--57a8a83f-9848-4649-9446-441e950d210f",
|
|
|
|
|
"indicator--57a8a841-c010-4dc1-ade3-49ab950d210f",
|
|
|
|
|
"indicator--57a8a844-8500-4069-9d4e-4242950d210f",
|
|
|
|
|
"indicator--57a8a846-7754-4728-9009-4af6950d210f",
|
|
|
|
|
"indicator--57a8a849-d474-4167-a864-46fb950d210f",
|
|
|
|
|
"indicator--57a8a84b-3da0-406b-b1ef-4ebb950d210f",
|
|
|
|
|
"indicator--57a8a84e-b484-4542-b6fe-4110950d210f",
|
|
|
|
|
"indicator--57a8a851-21dc-4028-9004-4ea9950d210f",
|
|
|
|
|
"indicator--57a8a853-ee60-41b1-bb4e-4f53950d210f",
|
|
|
|
|
"indicator--57a8a856-6fa8-4d13-b63f-44fe950d210f",
|
|
|
|
|
"indicator--57a8a859-0d0c-430a-8f4a-4bea950d210f",
|
|
|
|
|
"indicator--57a8a85b-7928-45c1-9380-4947950d210f",
|
|
|
|
|
"indicator--57a8a85d-d454-4580-be49-47b2950d210f",
|
|
|
|
|
"indicator--57a8a860-0a7c-4ac9-bce4-4d25950d210f",
|
|
|
|
|
"indicator--57a8a863-08f8-4010-9579-4e48950d210f",
|
|
|
|
|
"indicator--57a8a865-2e4c-46f0-bde3-412c950d210f",
|
|
|
|
|
"indicator--57a8a867-8f28-479b-9b64-40ee950d210f",
|
|
|
|
|
"indicator--57a8a869-6de8-4cc2-a0f8-4f89950d210f",
|
|
|
|
|
"indicator--57a8a86b-0370-40ef-885b-4175950d210f",
|
|
|
|
|
"indicator--57a8a86d-2fe4-4ef3-b50e-4d7a950d210f",
|
|
|
|
|
"indicator--57a8a86f-55ac-4669-824d-4350950d210f",
|
|
|
|
|
"indicator--57a8a870-e430-4dae-97e3-42d9950d210f",
|
|
|
|
|
"indicator--57a8a872-bdac-482e-99cd-4dc0950d210f",
|
|
|
|
|
"indicator--57a8a874-9a14-48d2-a3ac-43d7950d210f",
|
|
|
|
|
"indicator--57a8a876-d00c-4fdb-b3df-427d950d210f",
|
|
|
|
|
"indicator--57a8a878-b870-4f7b-ab86-4267950d210f",
|
|
|
|
|
"indicator--57a8a87a-3638-4221-afe1-4803950d210f",
|
|
|
|
|
"indicator--57a8a87c-a438-4012-8f5c-477c950d210f",
|
|
|
|
|
"indicator--57a8a87e-3b58-4033-9340-4b8a950d210f",
|
|
|
|
|
"indicator--57a8a880-7d74-4a50-b29e-4685950d210f",
|
|
|
|
|
"indicator--57a8a882-bc2c-4e42-ba47-44a0950d210f",
|
|
|
|
|
"indicator--57a8a884-2e20-459a-83a5-4511950d210f",
|
|
|
|
|
"indicator--57a8a886-7b9c-45c0-addf-48ba950d210f",
|
|
|
|
|
"indicator--57a8a888-9710-40d4-8a13-4cba950d210f",
|
|
|
|
|
"indicator--57a8a88a-a6e4-44fe-a08e-41e0950d210f",
|
|
|
|
|
"indicator--57a8a88c-20f4-4043-a48c-4b1c950d210f",
|
|
|
|
|
"indicator--57a8a88e-4810-4594-9a00-4f25950d210f",
|
|
|
|
|
"indicator--57a8a890-47a8-42fa-b2cf-4a15950d210f",
|
|
|
|
|
"indicator--57a8a892-0728-415e-813e-4b99950d210f",
|
|
|
|
|
"indicator--57a8a894-c1e0-4009-b32c-4595950d210f",
|
|
|
|
|
"indicator--57a8a896-38d4-4ae9-84fd-4f29950d210f",
|
|
|
|
|
"indicator--57a8a898-aad8-44ae-a16f-45af950d210f",
|
|
|
|
|
"indicator--57a8a89a-4d08-45e6-b565-45cb950d210f",
|
|
|
|
|
"indicator--57a8a89c-f5c4-4c13-b351-469a950d210f",
|
|
|
|
|
"indicator--57a8a89e-c4dc-495f-b81b-412e950d210f",
|
|
|
|
|
"indicator--57a8a8a0-dd68-410d-8dfe-4179950d210f",
|
|
|
|
|
"indicator--57a8a8a3-f92c-4c02-8a18-4104950d210f",
|
|
|
|
|
"indicator--57a8a8a5-bde0-4ae3-83d3-49cc950d210f",
|
|
|
|
|
"indicator--57a8a8a7-24d4-488e-aa91-4d89950d210f",
|
|
|
|
|
"indicator--57a8a8a9-bba8-454c-9895-43b9950d210f",
|
|
|
|
|
"indicator--57a8a8ab-04a0-4ab4-ba2b-4bb1950d210f",
|
|
|
|
|
"indicator--57a8a8ad-30d8-4dba-a26d-43d4950d210f",
|
|
|
|
|
"indicator--57a8a8af-ab68-4e5e-8666-4963950d210f",
|
|
|
|
|
"indicator--57a8a8b1-3c08-43ae-88af-4a54950d210f",
|
|
|
|
|
"indicator--57a8a8b3-67e8-4e63-bfce-41be950d210f",
|
|
|
|
|
"indicator--57a8a8b5-b204-4596-8cc1-48ea950d210f",
|
|
|
|
|
"indicator--57a8a8b7-6800-4321-93ed-403a950d210f",
|
|
|
|
|
"indicator--57a8a8b9-6600-48ad-85fc-4a1d950d210f",
|
|
|
|
|
"indicator--57a8a8bb-f498-4ed8-a05d-44d9950d210f",
|
|
|
|
|
"indicator--57a8a8bd-1b48-4e40-98c6-4c82950d210f",
|
|
|
|
|
"indicator--57a8a8bf-26f8-4f00-bcd2-4ce6950d210f",
|
|
|
|
|
"indicator--57a8a8c1-2544-4eda-ab90-42fb950d210f",
|
|
|
|
|
"indicator--57a8a8c3-bf38-464a-acc5-4c8d950d210f",
|
|
|
|
|
"indicator--57a8a8c5-f9bc-456b-9313-4965950d210f",
|
|
|
|
|
"indicator--57a8a8c7-e45c-464b-bc88-47f4950d210f",
|
|
|
|
|
"indicator--57a8a8c9-5a54-4b1d-b309-4a68950d210f",
|
|
|
|
|
"indicator--57a8a8cb-66e8-463e-bbbf-48c5950d210f",
|
|
|
|
|
"indicator--57a8a8cd-f154-434d-ac5f-4c3d950d210f",
|
|
|
|
|
"indicator--57a8a8d0-ea00-4fe9-aa0a-4a41950d210f",
|
|
|
|
|
"indicator--57a8a8d3-72d0-4a60-8264-48b1950d210f",
|
|
|
|
|
"indicator--57a8a8d5-adf8-4c47-b4c8-4c55950d210f",
|
|
|
|
|
"indicator--57a8a8d8-8714-4694-8826-48ea950d210f",
|
|
|
|
|
"indicator--57a8a8da-9be4-4c62-9be5-4d55950d210f",
|
|
|
|
|
"indicator--57a8a8dc-12e0-4f3d-843f-415f950d210f",
|
|
|
|
|
"indicator--57a8a8de-cd04-4953-8643-44e9950d210f",
|
|
|
|
|
"indicator--57a8a8e1-5bcc-4131-8e05-457e950d210f",
|
|
|
|
|
"indicator--57a8a8e3-ce78-468c-9177-4391950d210f",
|
|
|
|
|
"indicator--57a8a8e6-c1d8-4015-bd09-459b950d210f",
|
|
|
|
|
"indicator--57a8a8e8-3da8-482f-ba2a-4e92950d210f",
|
|
|
|
|
"indicator--57a8a8ea-d670-4381-8d01-441f950d210f",
|
|
|
|
|
"indicator--57a8a8ec-d34c-4e2d-8168-4477950d210f",
|
|
|
|
|
"indicator--57a8a8ee-3894-478d-9c31-4fba950d210f",
|
|
|
|
|
"indicator--57a8a8f0-dfb8-4e40-9e26-4062950d210f",
|
|
|
|
|
"indicator--57a8a8f2-ae98-4f8a-af45-4e7b950d210f",
|
|
|
|
|
"indicator--57a8a8f4-a9f4-47a6-85b7-4e36950d210f",
|
|
|
|
|
"indicator--57a8a8f6-f340-41e0-89d6-4ab7950d210f",
|
|
|
|
|
"indicator--57a8a8f8-98f4-4229-8aa5-4f5f950d210f",
|
|
|
|
|
"indicator--57a8a8fb-8a14-46b7-a4d4-4860950d210f",
|
|
|
|
|
"indicator--57a8a8fd-380c-4974-851d-4395950d210f",
|
|
|
|
|
"indicator--57a8a8ff-4258-446d-95c8-4f45950d210f",
|
|
|
|
|
"indicator--57a8a901-203c-4b16-b98d-48a0950d210f",
|
|
|
|
|
"indicator--57a8a903-2278-4102-b489-4bd1950d210f",
|
|
|
|
|
"indicator--57a8a905-142c-4984-81e4-4c93950d210f",
|
|
|
|
|
"indicator--57a8a907-7788-44f6-be2f-4004950d210f",
|
|
|
|
|
"indicator--57a8a909-37c4-4990-b87e-472e950d210f",
|
|
|
|
|
"indicator--57a8a90b-918c-4908-806a-48b1950d210f",
|
|
|
|
|
"indicator--57a8a90d-52fc-4171-b7a2-4a30950d210f",
|
|
|
|
|
"indicator--57a8a90f-5780-4ac6-9034-4baf950d210f",
|
|
|
|
|
"indicator--57a8a912-3970-49c3-a217-4d75950d210f",
|
|
|
|
|
"indicator--57a8a914-8a0c-4e0f-ab85-46a2950d210f",
|
|
|
|
|
"indicator--57a8a916-9cc0-4b3c-ace2-4b1a950d210f",
|
|
|
|
|
"indicator--57a8a918-2e00-44f9-9637-44b4950d210f",
|
|
|
|
|
"indicator--57a8a91a-9d9c-4451-9e7b-4c26950d210f",
|
|
|
|
|
"indicator--57a8a91c-1e78-47d0-af9e-4b99950d210f",
|
|
|
|
|
"indicator--57a8a91e-8218-4343-89a8-4ae0950d210f",
|
|
|
|
|
"indicator--57a8a920-ffec-47bf-b373-49df950d210f",
|
|
|
|
|
"indicator--57a8a922-6c94-4c72-a0cf-4f85950d210f"
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"Threat-Report",
|
|
|
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
|
|
|
"type:OSINT"
|
|
|
|
|
],
|
|
|
|
|
"object_marking_refs": [
|
|
|
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "observed-data",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "observed-data--57a8a440-55c4-42a9-b572-4779950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:24:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:24:48.000Z",
|
|
|
|
|
"first_observed": "2016-08-08T15:24:48Z",
|
|
|
|
|
"last_observed": "2016-08-08T15:24:48Z",
|
|
|
|
|
"number_observed": 1,
|
|
|
|
|
"object_refs": [
|
|
|
|
|
"url--57a8a440-55c4-42a9-b572-4779950d210f"
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"link\"",
|
|
|
|
|
"misp:category=\"External analysis\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "url",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "url--57a8a440-55c4-42a9-b572-4779950d210f",
|
|
|
|
|
"value": "http://researchcenter.paloaltonetworks.com/2016/08/unit42-orcus-birth-of-an-unusual-plugin-builder-rat/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "observed-data",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "observed-data--57a8a440-3a38-43a9-acd1-4dc7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:24:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:24:48.000Z",
|
|
|
|
|
"first_observed": "2016-08-08T15:24:48Z",
|
|
|
|
|
"last_observed": "2016-08-08T15:24:48Z",
|
|
|
|
|
"number_observed": 1,
|
|
|
|
|
"object_refs": [
|
|
|
|
|
"url--57a8a440-3a38-43a9-acd1-4dc7950d210f"
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"link\"",
|
|
|
|
|
"misp:category=\"External analysis\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "url",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "url--57a8a440-3a38-43a9-acd1-4dc7950d210f",
|
|
|
|
|
"value": "https://github.com/pan-unit42/iocs/blob/master/orcus/hashes.txt"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a451-264c-46ab-8b92-433f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '03998ee62fa733a11a1986fa169a7ecb9a29f7b2a15bb411dd94f394ee6e4f73']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a451-d590-4b6c-8cd5-49b5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3112fcda22c2469bcdbf62ac9dd8404dbec89c3dfd06989ff18d16fc86a117da']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a451-7278-4ac4-af7e-4d4b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '78249c1b24c0173d1e7e2f3d373bbe7866622ed064d2806fe621439df6aaecb4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a451-e648-48d6-927d-4a4e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1fd893f3a6a8714da3b42ca85b2270c89bc53645f8fbb6c3aac5e8c8fec40af6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a452-fb94-434f-a589-4011950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:06.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '770439ccabb8e74eefb58aaedc81701fb99b093a8bd843a799639b530bfceda9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a452-9e14-4fc0-8c19-47b4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:06.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '880f2611c92fce7cf8a10c99e4b782831d40f28ba32de36146869c59d5ddfbf5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a453-c510-4921-b635-4e62950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cd78900093b6b3677ff366579e1d2f071f5e7a3f3bc4f4bd73e9b562377ebe6b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a453-1588-4492-9d64-47ce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c9ee88f80505bb041d8355186890b624f3d52c906e6f1708c5997a24a06522e3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a453-4218-44d9-a6ba-4ca8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:07.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5b5205adaf14de9550c855f3c260851ba649c8d095b7ad763efe71818203653c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a454-5054-4948-b66b-464f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:08.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ed531a1bbf63e6a689ceb85a664a2dded58b153ec14cd1aa284e89b8c239cee1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a454-6ce0-4a60-ae90-47b1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:08.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '50518a79eada8b8c5e9bf7beb060bcb7be8ac15ac76f09879342d626ff5368f4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a455-0dc4-4a9b-b4e3-4e4d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:09.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '21774c3c63718bb29f9d699ab4dd56e3e042cd6b09d0e380112cec797a2a7ec8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a455-2d38-49a4-a6b4-4c9b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:09.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '51dd86346073cef7b4c5ff1cde8b1d57dfa246efd73c94559eac3fd52b738f8e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a456-fab0-403e-822f-4a0c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '75cc8c6f11326612f0cf26c95de44dcfbea2c0d34af78f878ac97d13686a4208']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a457-d4a4-48c4-b640-4a50950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:11.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2ac72896f8af7612d368bb4bcc7e431f80f111bb078a78218f04b4febe9bdba1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a458-fdd0-461d-a41b-4262950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9a56d0e5fa8dfcee45b9306ba977b0fcaee6e1fbe09c09c6f68c4e9d3af69ab2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a459-27d0-48cd-96ce-4673950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:13.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e0f3004a3e916e271c37c285027c3d1014f99207886056de99711fb4a0cc13d6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45a-5118-4d05-a937-4358950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:14.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '8a7a1f181aa0aafb387e2b081d03550741d2ac4d3eee2b259a78786e66e79f56']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45b-2f70-4d64-855a-4687950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'db895a1cab8a980c621e379326acff52fe647cdea6673930568a81f166c17a2b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45b-8334-414f-89ce-4d4d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ea7b4621e11c89f754dea401e3b89690ccf4b7c767c0aec2fb0a89893807817b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45c-5360-4abf-8796-4fe7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'fc315ccc882c3706bf0b9edbc4163342c0764cfaf6983a7e8a1104682fa41eb5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45d-24a8-40b2-b8a6-4136950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2eb62083ac22f903c4ecfbb76a9e2a5443fc39136f0f1f49e4570e553e57c091']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45e-0f80-4a92-b7e4-4ba3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '789d875f4bcfda25c8ffa94169193ad1c72dbd14851a9048ba6b0ac2b24d8846']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45e-d72c-4304-90d4-4ef6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '57a2743fb4c4ab12de3e851387e1642bfbc280da3e7ea1693e060af11006863e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45f-484c-428b-a881-45a2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a68cbdad109f02ee74b951995a6e4d05421f9948fb33db7ae1a82ab6275066d7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a45f-7094-4a8d-ad71-455a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd62ff3d0ee12d95ed2d63838ed121654141674d30fc8c681634cc0e506e4627c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a460-3914-43c3-a3fe-45b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '42c4e0fcbf35d70121f82017b92c93d7597690011a9246edda4094755d38cf4a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a460-ecb8-4014-ba98-4cf8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '14edc6c728cf72cadfe2c6be335bd281719ee48af8876af47db2b63e28be80a3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a460-6d08-4d12-9408-4bea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9d35a3d980a1284fa2f894e69e23bc47e43046032493a2174a31b76c11fe5ea2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a461-1048-4dd1-af1e-455d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '905f3ea8aea0ed42a1d700051681ef39c7311d6e6b66f2d8b7c5bd651b295247']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a461-1d20-4330-b2be-4022950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e2eb3e8c5238ef530b0946ba5e4138ad0d501d600a018878549e0c5ecfa0225c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a461-4bbc-456c-86c0-45a6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '73471b4962a9412736c7ea8a85b90d393522f7c54ae4d8352df3f9f779caeb93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a462-f448-46c4-92b9-4acd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4a0852b334bd089cc3e06f2ec88133c03ed747e6206318ccd6ea58df17f1f45b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a462-02f8-4d32-8a25-4c7a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '153f78aff7b18c3343fc49f2ddbff0e7d2e8d6272ccdeeb145661f1c55ed61c3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a463-abb0-4cfa-a7de-4070950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9336b0c691b58ea0584304362087ef1a353c93bcb4781bec1acd0a10663f6bb1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a463-1d04-462e-8995-439b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4b81675796064c1c77f158b823238357c981d18a17d2b4da92ef03459ac8a89f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a463-0ed4-41ab-8e06-48b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '433d29ad9252a9ee4124db989ae4c7dc95d58611ff777e76bf47f1765318ed3b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a464-cde4-45e0-9ea3-4230950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '19317455beed376a66a95a85b8e6c2420757aa6745a21e83dca364607e9f519f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a464-1af8-46ba-b327-4ca9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd6277a32758cb646ef886d0236624a35644b600365a0770dece9423340f4ba7f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a464-be8c-4b7b-a24e-460e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '966db22f18650163c50094e47025949dbb2c0250363351d66130bb0319999f8f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a465-3054-4df1-a851-4c65950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '93c2a208772480b64daa3b436142a3d0029219cc23f890584b2f430984f7fcb8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a465-5a80-4f23-ae26-45e0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c0c1454fbdc2ca819cb4f4d2516c22902430fb127d3a6c9d0b02f45d3b223ee5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a465-e654-4f62-a279-49f7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7e3cb5379ae7f066efb838e109ae6b0fd3b5d25c3e56ebf5ee964c5ef78f9f23']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a466-c158-4a3d-80e1-4ff3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3f73ce3d78d3c0b14a63ad200dfa8bdd525b565e1075545b74f24b31c7be6ca2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a466-f800-4bd9-8df7-4150950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '69a826fa53e2e1edb913d2a0a4d76a64a445bd59da74423596c3487a23ed2385']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a467-e030-4bb7-a4bc-45e1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6d6b30dcefb3203913ba69d2c2b57589f5dd9b564a5a54b1b184352766e17e67']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a467-aa7c-4202-8fd6-4012950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1e51349333f968f461f97544deb7098d6288bc6b835a12f0cd411955be641439']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a467-8b58-42ce-a94e-43b7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1761d77a9112e8fffca4b33268a78e12b647f312c951cafc040aac9f1a5bdb99']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a468-c074-43e1-bf3a-461d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd801699fc530ac61165a206a50d7c34630fcb5f845142e5f6451a87ff218004c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a468-4d4c-4005-a9de-4196950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '79a6eba95e3bd532a721a306eb2acb71b56c9e45980e866d28e98a085ac528de']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a468-d06c-40a3-b5c0-492e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '97b88c52eab6df19d597db8c7f1e8e2b1c3b0eea8ed1b337520b9fad41fb3c1b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a469-cdf4-4145-9d69-44f5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a38d0e4d2ab3bcf98f9a87672ec39b4010afcfe8971476ca1231872865a1df7d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a469-66f4-4e63-be18-45aa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3f90b54a17b15a2629adec66cfd5f3ff6fa2e654e32413782dfb1521beb52c2e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46a-7e6c-492c-a4f9-407d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '080f255865dd4321fca02e5ce87683138618f9201fffe335eea4d05f1fc49beb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46a-ad20-4702-a5f3-4df1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1e92bdce4f60a43e5bb71410f63b56b893f48bb35ad4ca1a93545d8f32f2f4b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46a-69b4-4384-a129-4c64950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '968effbd6373260ca0f8a45e2d5035517c8ec1fe380f3d1be1aa8423def86357']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46b-3238-4f56-b637-4078950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a201c5272fc141fb07b622b1d73977acc7d499a118ff5e90e55a50a44780b32d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46b-67c8-4318-8f75-431e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '15a5a2b65c8acfeef7a9470b28f7104fecb323fd3418a7f88e5ca012a351d85e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46b-2470-480f-83e4-4340950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '787286d71ee50fad99563d324bc4c2b65921f579d13a874cf854922dd76d35ce']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46c-0854-405a-bdf6-406a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4938bd2dd8f0462e4c28db2b864ea7f3c2d40b60a5c0f4f2b2a0fe6dde82abed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46c-cba0-49df-b752-4ae9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd6a1e20a82f4a18626869d1b91e8fd192e1b444cec7020690fc5a3b0c79837de']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46d-f898-4c24-a742-44a7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6631f2a0478326ea27ee1ab0abbf82948c74012a78f4d894be7d3e34c8813eda']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46d-e394-4ab2-a6ca-467a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '218ccc259ae78f482191602c753ede43eed873a47406792e8d5504e527bfea38']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46d-7360-422e-a006-41ef950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b307864a52f8686a858690237b7162c98745f08b462edb924b0c60b2b5838320']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46e-dc54-43d0-a8cf-4658950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a5d5973e328b38d6def940c228d5b78803d1d7031ee4526ea2f7a0785cf3d70f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46e-7b08-45f7-b156-478b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5c850750749954ac508dfeb756ddf071e304669fece52f6540d7d300ad10496f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46e-cd4c-4938-8177-49a8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '652a05db1d96a5b9a7ab04b66526626ed173847319fd933af2170e04b4762cff']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46f-1ce4-4536-9de4-458f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '69f0f24f9bba7b01ebe984086417a5144db5401f8fb9b4381cf488e58439d6c8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46f-41e0-4818-b80a-42e9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7655b8cf0033e8ec288f14aa1c6c45992fd4f47caaa440edb014427c6e70cb89']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a46f-81b0-47d5-9c5e-4c4f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1ce775962f1d90032f7f9a297f0fb50dd482ab3317df487c3691c34f73f1a38d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a470-9004-4717-a680-4539950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4d65da438bd006054e3e42dfdb4d5afdd962f346ca1694d2bf35cc901fbf221f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a470-43fc-4cf9-bc4c-4af9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1af6c2f07f25398cd280be3d58a477463b1c400a903ff871b58d382d1dbe1f94']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a471-d550-4fc7-80d7-41fd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '414c1a7481c69639686007a42cf3a519e9a184cac87176ded4ff2ae3dffb6dd3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a471-5dcc-45e0-bd75-47d9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '24076aa26d86cb14330f8c540234ea2deac3825fe9c6f9b8579d22699be32853']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a471-66b0-4b0f-8f81-4040950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ff0c148af67071d03cebc2bfcee27353cfae64ba13f2c3fde4f9cfdc8b4c8e98']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a472-cee0-4470-a52f-4fd7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6cd3bc09b37d712173ad422288ee720dc0a63366f18a95c36d43784a03a9ed43']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a472-2ce4-41f0-bf44-4087950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '078531cf6e84c9f8f55e75f53c78fcd31f55078216f743c6421adfa98cf06479']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a472-4188-4200-9a5a-4707950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4787a196474cb8ee59b2a1c7e3c2f0e4cea4461304c40bb6a4bac5debd46765f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a473-febc-4d55-b703-4e4a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9ca492616ceea6a7b3f53196b950a2f84a7326e8fa91f70923a6ff407913c2b3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a473-c080-45ce-b31c-4a2f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '201acfe7b6b05e6f7c6a360b873007c2381100c11837722d7d92ada742cdd336']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a473-65dc-4f69-9d3c-4811950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cff55274562b4835549d69f20575c905ebc1825a5e354e07a60a1cdcb48984f4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a474-c850-40ad-b6b0-439d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '485ffde041120a00c13acef876774485fa746fe398debfea5e96020d33bd6271']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a474-7ad8-4408-bac0-4326950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '489de3edd590b265b3e4504b5bd5018a7ad8a3f319a6313637787e5d8a58ffdb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a475-8628-4e6e-9f1e-4717950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5576b2ff7ffca9ebce21bacaaa3121bb7a9afcc1350b7cdb95a950b3c8e5035d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a475-ad04-44dd-a629-4fa1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'bd2a5012b18fa551327dcdd7b2bb8dd765704b65bcbda9fa31306a71846ea1a4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a475-41c0-4f6d-8b59-4a06950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1dc9cf00d615a7d231ada341190be36224bd7811a3e00ab9cada7efc6c206969']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a476-84d0-42ae-b675-4a53950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '986ba0643f2e162ad99bc58bc03832f6d4f44bf4d4725f6cb2bc7fd7e19d57ed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a476-eb6c-4346-940f-47ce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c72ad1487ae2e24ff8c4f631c9f0bbd09825dcdc93e01450bae4db7cdd4c56b2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a476-38f4-4c3b-ad50-40b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2bfa3f42d4762d48e986a25161a1187772edc4f712966b3a19a4652463496959']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a477-582c-4c1f-93f2-4061950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '341b82597f32814afa2b2538100945923172a802b3462af0b8e343dde80195ba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a477-a4ac-4f26-9286-4440950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '8c111551a53ca7d59bc5293653d0197fb9fd99b452a13518464cde1aca979507']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a478-71b0-446e-9a99-4be9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '270be8a8eaebe9e4d61274b118372e595adb615eb36f55f851dfa266f53c0991']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a478-4030-4574-b701-47e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0c9d432acc9c396f54dd4f580ecfa607e636eb2212d7825f846d8b2054b5011c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a478-0588-41b7-92ec-4649950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '43e9fed3fc3553c0ce1858a19af5e452b01bd7bf11354dfaf6845fd86f5917c5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a479-35d8-48f9-8201-46f9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a881b05dd9c3155d97b75789a810b11f8fca745a1eca819ab336934367266fbb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a479-229c-427b-a42d-4cde950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5ca353453bdcfbe897b5bd1660698528f514da3875e87944f16f3aaf3446f7b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a479-5a20-4879-b991-443b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '41b6b408d21d0c64ed0a44465f01fce5a92a5b51f04c88f7196f3529d4f1792f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47a-6834-4b9c-afc6-4e5a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e5f76f4c4b2e6ac365c681cd37530d14deb0f8d4767655f4f975806367ea6f13']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47a-03f0-45ec-b73e-44e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '51a9825767d2e2894fb9604d31da32e1f9b2c8a0424bcac2bc40a21a93ec3321']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47a-67f4-46f4-8a8a-443f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f9bb28dbe6d311f81e656791abdd8f1651f007d3ea21bdbe7f0f77b80c74e46b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47b-38d0-44c1-b36e-46ec950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:47.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6d889a8b0d20632a7bc9b2118a13759cf0b63858fd15400ad5e84ae752fc9439']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47b-98ec-41d1-b9f4-4081950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:47.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c70aebf342a2fcc2be318d1942581fc9b197e8912ac174857d42bef6a2723a1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47c-d520-40be-99a3-4232950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6dc6a0d71ca831f50b3f50ff06391348943b460721640fde31725a4d3d45fc29']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47c-0058-4e8e-bbea-4813950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1b789b375fdfe6da9c74013ae8aebc3dab2bcd7f014ed14437e7c9aa78f86946']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47c-992c-4411-a39f-4136950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:48.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f727325dfe8c8132ad2b71c42c7dad6b62bb54292631b6812bf82288ccb1e223']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47d-dc3c-40eb-9d40-4b63950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '431fda6151e73be42660aa087d8d255eaf17dac26072a2762d4cd94211d8e327']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47d-fd68-4cac-b60a-4461950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ab7cfb57e8a713aaf4bf69dbcaefc1519c573f4844fb6d049bce938dc6910d65']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47d-8b6c-43c0-bc2b-420a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:49.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '918788687c1586d6549b207a2556ca519a52a0ad7af4c9a48314eceb044b6391']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47e-bdf8-4a6f-b378-4b6b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:50.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5ea9872dcdb18200e0ec73c54b1720f4868a4d349ee38316cd58b5cc2285c04c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47e-e7d8-4772-a71d-416f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:50.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c6a0a0336c1b7feaed29e1544a6b679b27f7e5f25de05c5793f6fb822e1f3029']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47f-a6e0-4192-9c22-4961950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '879aeefb89b793a6412fa2a03359d03fe0c63d38658cf7e8d405cce1aab82338']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47f-b2dc-425d-84f9-45d6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '334ce8473ffc5bd8d6ba57f05526319cc3afb9035d5077678f175ab2e1401921']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a47f-2d44-4ad1-8b67-401e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:51.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '24af678eb0e604fe98c3b107ff584690804478a15280ca6869a0bc5628560518']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a480-3df8-4190-967e-4bfd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b6a891a747201c388dc51154ad7afd9222e9059bdce4dc300d1f228942bb0053']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a480-5aec-4cc7-9cbc-461a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5538209cbf28c038701986059c6c4927ff5ad524bd58b8dc1dc474c42955fa9b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a480-bcb8-43e1-9225-4ade950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:52.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd178309a94fb42ab3d0508f67ff92aa2c3c63c7eff97131db2590bd6d5a8a70b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a481-21e4-4d15-9987-4849950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9b557ec889152f554ea407db214a1a4314c68d7395a2d945e16f56dbd045185c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a481-31e8-4546-873d-4953950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '97200ade9329be5d85bbbeec5e58b3ff79aacdaf145d0a961f8c751be9fb846f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a481-3be8-459b-aec1-4d8a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:53.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3619ff07258fd788ca6cc7afdd677e7f91d6ac1b752af34ce80f6e0a9ae31a35']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a482-a818-4d5f-a699-47cf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:54.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '92eb8d4d5864d52da34b6ce0652eb123c6740e2635720bafaedb0d978bb29358']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a482-0124-4bb1-a056-43ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:54.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '549c9a7838153179c884a67d567cdd184d117768f1f5e524f8eff0f7e02265b5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a483-481c-4cae-88b4-4560950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ae014a74e6d8ee21b64d595101ab5a83b0d5af7dcdedd26d15254ef2a4ed2559']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a483-976c-44e5-9675-4b3b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4aea021123aa654e37f642d855baf1269cbeee54118ac942a793d295a016f3ee']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a483-bde8-4550-bdc6-4dd0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c226118deeedd237fef3801af689dbdae4c196ae7879f5138a322780462004be']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a484-d3f8-4baa-b9ed-48f2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2e21f9d98980fa3ffc04a0698cb3d666d586491b37bcd5ffbb41048549619e83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a484-b598-4e25-8b3c-4d15950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a6b1055fae0ba588cfb1f6934d704baa522ed21e05dd5191d5a761a11457ebd7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a484-356c-4589-b508-4ddf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:56.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6d8220803d0125baa8f6a8c513f2a467492c4cef6bac87441bdd09c4841e5e74']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a485-93e4-4d51-930f-4ad4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:57.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'fa357f4d21eb53ec92873c3c3acce687b66c526ef7eea35dc053c039a600e48e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a485-39ac-47ca-9775-45cb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:57.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '087836e753b3e29a798f52476c36ee99e3a53f691226cd81fc45a86e80d8f8e2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a486-3cc8-4acd-8a45-4ef2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:58.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7a9c62afa8c71277752a3ec4e8a6e9dca38c8e6a8392601c44eed65a432bc4b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a486-bbac-49e8-9391-430e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:58.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '59ad264a6b38f7b12deffff609c217ce1830a5269b119c8ce2ff96087b3b11b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a487-6888-4a9c-9280-4127950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:25:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:25:59.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '850f7653b9864ea446a46039a3201c23da09e48e99d8eaa0f8fdac04b61576d5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:25:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a488-fc54-4f9c-bc44-4365950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '436460681e88b3aedd2bed3d40f6d1299d0f9270a935f0bb230fafa48b73f221']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a488-0394-4e72-b1f8-488a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'be3f03a0598ff967642a4ad1cbb622b18fad1ce03361d0f00c37a53950e33c5d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a488-c7c8-4d5b-ad0c-463f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:00.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '664933e1ad1b406fcda058a5d1a148aac1b8ffc4c515a06913204876b5032207']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a489-cc5c-4feb-a641-4fe0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:01.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'de915c7d8e640f2e501084e42d38cb5706a9b2fc8e0f5d9680844bf61e6a2112']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48a-3e58-48e0-b41f-4c7f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:02.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'dc37f3d97778dfcd6e787fd1f181dcad01e843afb646ba8689adf9dae9902aec']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48a-2bf0-45df-bdbf-4254950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:02.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '085484195db75cf77e2fd8b15f048f869ecc4da172ffe7f742494ec0cc5c728c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48b-94c4-45f0-ab31-4e8c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:03.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '8d8776e392a8c99b7049a94e8f937424392d3069199bc60f114aba7f8d0f1d8a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48b-3450-4f90-8652-4aa1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:03.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4292cbefd9a7289f7438114dc98a115c106fe0108781ed4918c37a55f2fb5e5f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48c-be7c-4b15-9560-4113950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:04.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd223438441cba166c5cf2f1b3dd4cab08a807d37d15e9363137396112265bd61']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48c-1f20-4c55-9db9-4c92950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:04.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e025fd396ba56af87e4c13b06bb603916c85c2a1cecae0fb0dbe7d5a000c7dce']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48d-d8bc-4012-ae4a-4442950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ec083b0c965bc97d2d87ef713a0d9e741203cd02cd1cbba28b5932aaa2411b75']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48e-d68c-4565-983f-4495950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:06.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '644ee3318813aa46b1a0b7d16bddcfeab54351eb2f855fa147dbdc2f6bc26660']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a48f-4be4-4d3b-886a-4783950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:07.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd5c972342a185e81a19becd9ddea2b7330ae9300187333ed10c7c6a86be81375']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a490-a9f8-42cb-ad75-4bac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:08.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3c5a2f843f24501925dac2e155b53fcc0390da898f846be81695a48ad7e466dd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a491-a124-493e-aa74-4395950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:09.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ea038dc5d03d4e5cefa9e73b4ec5424b681c7d43c0176c61d97c58ea4ebcfda0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a492-ea54-47a7-ad66-481a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ce27fd54305fefd606a73c8ccf85f29fbd977a40ca164b51f754384b5457a1f8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a492-9378-4ac2-8097-4cdc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd8ceec2cdfd50b4ce031b78fb691b71c084bc9be016452e75631b857bcb55dfc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a493-1940-48bf-a9af-42dd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:11.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7372c6b86589ff6756e0889860d9155122dc3b86f9a3be58e8adc7eaa7db6c93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a494-e75c-4b43-bd06-468e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '46c060d467675f9cc7daab832a2165ea626d1ea7abfbbf568da70c87a1ac7755']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a494-3914-4d4d-b4e9-4c4f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b9954fdda438e064d41c67d2c38634fe7301050534522fc454c445941f851af4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a494-f530-4788-8409-4596950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '815632c2cdb0b8434ce4c3579d0869eaaf21d203e0c01a6cb161e946bfbb3abd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a495-2db8-4e83-9021-4c45950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:13.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'caeeb5604abcf212e0c614e9aa1f2e428ab77b09916609f6fc3d6368dbf172b2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a496-ea74-488c-8fbc-47a6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:14.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e4a9567cf41b8ab99099cc9288173271b6d46ea4049345bf8741ea2c31c1e449']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a496-e9a4-44f1-92e8-44be950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:14.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '345f8c5e95818db45377ba4ce3aa8115d297c2fa4e5ea50b688a66130862c481']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a497-7d94-48ed-8cc4-4330950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd79eb7c62ea8947525f55d81187f1eb5be7dba3088eb6e5a8fb7bee23dcc9640']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a498-0950-4999-a170-4b16950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd76d5ecc9f11bc663932e31a9525306a328073ccccd547b61ee570ecfec7c176']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a498-df2c-463c-86fb-4827950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ce22ab2602eafdbbb5deae26e42308d85531daf19bad13f494552e3b44f16158']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a498-1608-466a-b0b4-424f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c14e8c94245f23b880dbec5322546248a09a06e4dae5d10acf02b27081586bfb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a499-514c-4054-8098-4136950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '02b451de4696ff472a87e6c2e85d18110c8c6a1dbe74e138ca41c465b4131e23']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49a-9518-4897-8450-4eaf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '579826fed3c3807f42985072a5665edf6f9eb0649366d64faedde283dcf13adf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49b-eadc-455c-9678-4983950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '85b61b8f8aee1cf63f8cfd5155c42041589609f517878c871f5fd6c610c136e0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49b-5620-4448-bc7e-4673950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f6409eeb12e6b1171fc99cbb9ac4c4cd668bf42d2b3d426965f6ca1d2b01959f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49c-ccd8-4d2c-b524-4540950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cb5cde5bf1637cc81aaab6629c06bc029ad128ad9125b9f3fb8b92361ee4404d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49d-6958-45a7-8466-4c14950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a21feaad209c39e0c6a069b0cde4e027de5c041b6363228584bf6ab64d2e4ad3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49d-1358-4461-b913-4662950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '10dd16fe432b6f7aef6d917017264918eb92dc2d6ee71e6a73a8af203b0a83d8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49e-3780-4559-a3ab-46f5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '151eb1a5da6f004175cfbf9d4bf171ee01fa364d07c530e824441afab248ddfd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49e-d2f0-4603-a988-4e40950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '16bc5785ae22552a16ad8337bcfbca661eddc4460084ea7f83c9e90ecde373ce']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49f-68c0-4cbc-8d28-44df950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '10f11fef194530bd8aaacbe60664a21a6e227d2cd3eea940a4a85049adc1a6d4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a49f-c418-454a-9328-4db9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '61c3d9a4e77e01650126d515895ba8b81d8347ed6077493a920bd19a7d50e926']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a0-c330-42f5-a1d6-491f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'dd5041e09b0d3eea9e9e25dd2a0b102524bfb858f650a5f2bc6e71fa5937dfb0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a1-bf74-4c9a-ae3c-4629950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9ce17df875f59ef1a872e43575210990032a6df9ab35b6775b9fb626d502e15b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a1-ff8c-40e0-8907-40fa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd1c948c139cfefc03df11f9bf2bd16146b6d58169b1b1d7b234b2c4a13ed3f86']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a2-a804-4c0b-a69d-46ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a574fdb8afd4a58fc27eb11e8d04e4f1455fa32d50a4b2761f990655365264f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a2-e538-4971-90f4-4ea6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '72f29a2af1a62863fd57fc09873d1b0837469e4d0be962da432895b415c8c73b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a2-9404-4fc3-a7e6-49b7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '8f44aed5853fd488406e04353e243fc057b6a625177eb6e635452cba5ef70ed6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a3-da60-42fd-81d6-4e2f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b1d6774b0d5f88ceb924be6f4fc91999bea4fed8fa5195f902a484f60764632e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a3-c1e0-41e6-b506-490a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e43c76d73d6529d458e4c31dcbafa0d86a8a1345541919aae99ad7597227933d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a3-aaec-4b2e-94d7-4962950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '176bfc4538b7f8954ceb71c9672a3c2e95195960e45bff9d492ad5ca04fe859a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a4-5438-4fd7-b121-40a3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd32107885642843505efe42d213996ae4bb0fbbd8d82484bb8fb329f627b75db']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a4-7038-46bf-91fe-45dc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7993a8c8ad57ccaf98d060bbc4ba51fd4c9459f5b9c126570aacb4517dfbef35']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a5-d558-4841-88d4-4026950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '50f635c018b46224f395a691baadf9c18e1dd31af0927fe5aa95c4dbdb149f4d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a5-4560-40af-b8d3-40cd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2bff7b36d402c5a8951244dfe527a6b90431c051dc0771ad0e60243c011959f8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a6-26f0-4f0b-97f7-413e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'dba6edef542290e276be055bc737a49905eb7283f818c852917ab1883c938eb5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a6-9458-49e4-9afc-4f28950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c5ed8f4d07604827d7eff84aefc96c6cc4c138a8b535db63b9f4519b2a570d78']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a7-b83c-4e2a-92cf-4bc0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'eaabe75a6e62a4663d17c38dad014cfa2370429112754d0c4e8ff9136b61eb67']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a7-5e3c-4120-bdfd-4fae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b981078d713a694962f3fdec0dd570a74950d3ec1c1a2925ba98dbe6bc87af22']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a7-ba14-489b-8f4f-4cf5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4f5bbde33a425bfd7e48eb5a74877c104eb2d9887770046e4fa083b44f7017b4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a8-fc20-4e76-8658-4567950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0c07c853edbc2b7dcc34d2a20bbfb12ef46c67e2424b8733a100b8aa2672dca8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a8-47e0-4ad9-b2f6-4fc4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f6b287ad5cb26e44527c1337ce1c61f3d175b8862ebbca5e65948964306708cd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a9-69c8-4eca-b316-4f66950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '95a4efef00d50dcb48df51b94750567914e9aebb93f91b22152f40041beb65da']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4a9-2550-4562-a68b-45c4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '19afc6355e3be42a38c133de279a9ee2739b22f0f022d68f9b60514a90155e99']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4aa-4c44-4a40-af5f-4feb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c097290074588cc7fd1e8a103beb052faf38c6f7a2c616c2a4505b1b5695ff65']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4aa-ba50-4c47-92e7-4356950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '568e5fd55ce5b3c00e81c4e580da7fb85799cbfd214737e9d831650f309b7f5a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ab-f1d0-4b8a-88fb-48ba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '44996598c59fe3b9ff3b5cbe4a6777cc02785a60c52f203c7d3e063f77eb259d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ab-a268-4c2f-9ec4-4993950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2c7ccdeb5897e3b67ef42fb51c2a60f52a6bd6ced753a82cd0b7073b75b71959']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ac-34d8-4882-b437-46f6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a3af90d162e1d51cb5c878fad0ae085c1d504ef4f662fce506600209a4e30a06']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ac-c73c-45b7-8f43-4165950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c34469e9cf98f82f58c8f6df110a4312b6426651046e038b98a477c5bb41dce6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ad-ee18-44ea-a396-4c48950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '105afb14864da6ebb23d21f3bb1a5b2a516e38f7d57d5756e317e5b10028943b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ad-f5b8-4fd1-96a4-4d0d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'fd137fe199b9a942c82c0200241d22ca94990aaa6b0f47492a1f5e494ef58c3b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ad-f06c-40d8-aa80-4b78950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f72ac76104154b86e85b1afa837e94510335851780080743fe611e07b6ff79c6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ae-0c40-4ade-9608-4569950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3fb872e1241a82d6bc0e91a4ef439760aff88e7cd0d4e07e711b8ce5ce6bd75f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ae-9744-4cfd-a036-4938950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '05e83fca5cd522ceb94133e8c27c991db4e4a272e995e83f0f9c045ef8deb38b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4af-b668-44bf-afc0-43ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '951851d14a03da1106d010d7b957732dd25793d8ac2c3f3acc14f04b067d9523']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4af-0d8c-4170-b861-4938950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'eb6a88bbbe752253aece743442fcbee7cb205a15780065279deac0484ea4107d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b0-b58c-49ba-b312-4822950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c76a695d86d2cc9ee76d2d4bc84f1d5a17101158357e73a48f3f1bc8f4facda1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b0-ded8-4fa9-95c0-4d4a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd704090175212056558c4f274a4a27acd6b23aec8ba98349ff27eb53477f4b0b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b1-62bc-4fff-b376-4b7c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7e462b671a8d05eb38a5e66c5e8ad43c2bd1ab5588c04c56a2326f69c79440b4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b1-5a08-49e1-bf43-4821950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f81c6d59bfecae0b39bfb7cb1f30f686ad8b6b72cffe09407f06023200478758']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b2-fc2c-4678-874b-4146950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1fd1ecb8b7c38b21bcafdd41fc599e0707ca972d0df33f76e32fb5c0e122d875']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b2-ba58-4c81-808a-44ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '196268250b88ea6a1f42d45b968257c6bf8351a837427e81e657bfb8384bdab3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b3-0de4-44fa-b5c0-4e1d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '321325d931ef803d5a871ed35a6bd4fdc894afaf73fe1519db38716b04be6195']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b3-f348-4cfb-a531-4cb2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a7ba19f08d8badc8c212a5b1535c5691d83442b51fdd0431dd5ad30fbb107bb6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b4-8dac-4299-b747-4136950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '03048369e3853dacc6871b81fd2769f36be1ca282c11cca2ffae5ecb0e41d4f1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b4-2780-4688-a916-40d9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '647877d4605f0bf20fb15c7dc19b80579003c8cb44f2a7c88b3fe3ccd686cb8e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b5-0b68-4dd0-833e-4102950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '226b73231ac077ee0465786f95266f61c2fca5c8919e6a84bd626c0d6d42705a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b5-9528-4bf5-852e-4793950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '812b0a04dae91df7208bb9ce6d3edfbc6fa925a07db89a319e13dabcc40935a3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b6-5990-4814-b86f-4d09950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2b257bae1108d54f6d97d8332dd9c57bc71b4eb42fb9bd6755b1156339aaba18']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b6-1340-4aa9-9779-4e4c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4fe5247caf0f041aa7684b1eb771c264b1e3b627e5c5d06178e9199cba5843d6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b6-0438-4874-97e0-47d2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:46.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7cb91088002641b54684a582654d9bb1d34fbcaa6c1d379dfadd8f88e9297e19']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b7-e704-4dbf-ac8b-4b22950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:47.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '490c494600e98e8e276520b0f8407b40695e4589a9df33cda154856f448b2a17']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b7-1fe4-435d-8a5d-4e12950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:47.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '09113e85de49dacd9d65c1150df7039fb053ee7a6ee6e37a1b24535083cd5284']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b8-18c0-452c-95e0-4e43950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:48.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '78777a42f9d59926fe2805c03465852e88cdf70ec7dcc99466bcdecb1033f78e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b8-e2d8-41df-8097-4587950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:48.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd774ee440c71d33604d56e384b737b8f3983d702188c23e034ad9bf947cc46c2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b9-d778-4190-945f-41c1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:49.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7f87ef80c26699d89b6d71412c8b8389080a654f56a6c58edee95869a3513b55']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4b9-9534-4bad-b7fe-4b51950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:49.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '16be093da0780e5869c6a60450408c6827f6f733cb94b56dc3f79263fb8f9a83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ba-32c4-4d87-a4e9-4a83950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:50.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a1bfb406911a81361235bfc6470b5e4a133605bdc4d843b44d56a31bbe0ae757']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ba-605c-48dd-bdfa-43bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:50.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'aea95365a40b0bfe047907e34f6bfed7444c27e4a897da6fe390358f5941da3b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bb-e238-481b-90a8-4933950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:51.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f7581a28c90208487380fb7ba5bb931d6cf4d2187ede73986afff9824ceeb27c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bb-7a7c-4b0a-a07e-4f68950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:51.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a93f9720f198776e4ae04ef599acb713fd8d95c4f1539b843942007000367d87']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bc-b050-412b-bbeb-448a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:52.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '67171f3b6d4a281aa11b34320296186ec2f37f2a07e1bded06763a8893b855eb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bc-26d8-42ca-b100-41b1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:52.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9da61001549cb6cecf95fe6bce17a3b2b3b8b3639139274f0d64adb6fb2f44e3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bd-3260-4281-8825-4ba1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:53.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5941c7816891acca64ef2db52c61a97894076252b60a55be3fa56c1fd06e79c3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bd-7830-44fb-bf14-40a7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:53.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5e8f154b9267e213df28433ef8b3244a75999522ff33c73d30ea9137bc4b0e06']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4be-50a0-44c8-abf4-46e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:54.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'eea7e7b1f4e7b12dd4b0d178466508b26db7d3891d25165400b3e77a3cb07c0d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4be-ab64-4b02-b34d-4ea4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:54.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '12da3633cf737462d40915f93296f00f640150e8c85141aaadf4dc8afa1616fd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bf-515c-4899-a44b-4993950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0620c4e2d109458b9938c2f12afce6cfc269f209ab484c4fbb85fdee3d9e17fe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bf-8c58-442e-bdcc-4a9e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '70cf05eb46de59b793ba6c11c330cd5b04916e57dac2211f8f163115b257ee7a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4bf-a0f0-48a9-ab2e-49ed950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:55.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '22b09c330b65a4f808f20381d0647563525a1572fcc46533f5cac2902bc6cbc6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c0-8194-434a-967d-4c89950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:56.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2a51ce91027bdce64d8d46878d42d4ca4dbb6909443016456369057bb6e6539a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c0-ff14-4807-9505-4cbb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:56.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e873910174af539b73ba521ed1ea6b8a444c1168b084e7d9baf5009258e81132']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c1-4354-4bd2-9399-4ab8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:57.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '107dbdfd69ef45fa2a2b711851b46f3570eb89e2c4224b7138a130f9bd786a62']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c1-52b4-499c-bb65-4bfa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:57.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '28361a778928826650850df8ead254d1439d42441827c1f8e8d342a6efee42fe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c2-ecc0-43f1-8393-43d0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:58.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '73996e06835f8d0b9e374762b2632f146b440ca252a66661c9a1489a4d81a0c7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c2-fd4c-48db-8d1d-457c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:58.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7fc91eb144b4d819291c58d52b1977e66a4dd3a63ed1ea41ef26723b04df4750']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c3-083c-4efb-ac7c-45cc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '473c3d5c9a3a193c436f3eddca36937ac0324767dd12e12401fbfcb218188592']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c3-82ec-4e7a-8a69-4a71950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c24cef600a1318b6d0aaa08a3d5eeb19ca88e924b64c33144badecf08f3f4b7f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c3-be80-4bb5-a419-49c4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:26:59.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c568cdd075c1fba3232fc67ea4f927d608104ad9ab2d921e42cad4e96b678595']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:26:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c4-32ec-4854-932e-4491950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:00.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4fd5285211359406bdb99fe8e1bf88250fdefa8e55d8190588726638bfbf137c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c4-cf48-462a-a1b8-4267950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:00.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'fd67c00f427b5effdb5d831a72416c97c1277d4d8eafd7d02163b2bba27b5ea2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c5-e308-47b7-b686-4844950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:01.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '708f0504bd0db78504b78e8d7374549ccd5fc6315ca9962f4ad01590d61d7ca4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c5-8220-4944-8156-4831950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:01.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0adec19187eacffb24b1c811810d8bfa87cc20a3031f8587c86809d8405a5950']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c6-1fb4-4f74-abb7-4f31950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b67e8bcfa47788b2f92741d600a375a7ad9349c599639adb2723a6d21f65aa06']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c6-c040-4e4f-bf90-4777950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'bc74071596921a6d460c11515e732e4b84ac927406c8c6f6be9be36df5764758']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c7-bf04-4623-ac42-42af950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:02.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ff9a69dce30de1c8ad2c4cb3ee9eb64272d0434c8b8ea694d5ccbe1e5a9b57e1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c7-fe18-4574-9272-4d2e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:03.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e74bdf1a5f1a4349d1aa532115a0e86050121d554c5eb323b6402465c08ed790']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c7-4ba0-4481-baf3-48d5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:03.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '44988bcba49ee709b6bfdf7d6a8f38457cf629ad16d0d97de3c26d3507db9af3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c8-be5c-467c-b245-440a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:04.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a800a6dffc87b26a843c3b76608fa6bd818a82d8a4e2a079ed4312b20153eff9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c8-ee4c-408b-81e2-4d9b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:04.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c582f60ee71785924b1f56d6867dedf8c7f43370aa30d62dda6217da98496783']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c9-d554-4882-8481-4c0d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c1d07356dae7cc9dc209d5c4103ec509daaa68c061fb05bbc6f4eee00fe1cd54']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c9-13f8-4753-93a9-4e8a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cbade24c31a1808c22eae6668df15f1ec9e91cadd75a860ca1aae5030933396f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4c9-48d8-4b5e-bb69-44e8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:05.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9e6cfd39d823436f948a65d7263e0bf951fa56d53f3168c0290605cd662f7abe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ca-57d0-49fd-afbc-4a18950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:06.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b5e817f782b6f95ea4e7bd8feae8cbb41e3c80c8967c1c16e677856d89867cf1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cb-b94c-4dbb-adfb-492f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:07.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '24194c4e5b0aa0d33248aba5bf66dfb7f84e2a27dd05bb541e0131380a6f2e48']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cc-b758-440c-b9ff-424b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:08.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c71c2d4f2a680a8941107078821f71bb204a2a7563b3da20cb9262d1726799fe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cd-95b8-4519-a10b-4e63950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:08.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '42297275853e5f6bf99a12d618b63a9c4efc458fb700534c50a4c498871fc0b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cd-6ffc-44f3-9f19-482f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:09.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '5849b8413af68584d8115bb85bd594b97cb478f03b59f045740094c8608c656e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cd-7008-4432-b6e8-4d49950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:09.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'dbba780da55ba6441eec4e60d65bd1a8d5e2f58f8c7b69284eb995d41cbfc93f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ce-f588-4248-91b7-4e25950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cd51a6bfabaf772c26d978a83df14cd04c3bf972ea461f582c4ea9c5832f462e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ce-0aa0-486a-97b9-40bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '16f17a454a0f47d3dce729fc72ab557aba983e634854c5ff2a159a9e05a1e1e7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ce-3e04-4f6c-9bb7-4830950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:10.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '53a7e0dd7d46ae1b83a7d6bfb209544adeb04bd022e178534528791dc741da89']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cf-ddb0-4978-b61b-4d29950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:11.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cbfbd03cec824bd8de78281d4915110d4cd3984ba23c3ab5dc84313b17f44f92']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4cf-4ec4-4b58-b27d-4807950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:11.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f98ecbad7ca4115e43c45951d5e094cb2f34ea37f1f078aa7cab3fd24646639e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d0-114c-431f-b443-48de950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd6baeb5c94bb1b50918e1b1671a55c18df66ae5edbf719ccb286643998b39019']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d0-f6b0-4afa-a1b7-4729950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '23fe906b05347864772c761aed1dc425d451a9905e226b13bc885802ea82886d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d0-1d14-41d7-a2f7-4c6a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:12.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0c9e0593aa541f9a04c11757a9a9677392c4b55d0ac0252dc55bcee1efb7a2b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d1-b058-4dfb-87ba-4e80950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:13.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9d309ef956645c5f67520950cebdbe5442b5048cc9df59d3cc54cb670275b2ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d1-a9a0-46cc-9b71-4eae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:13.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d2-c124-44fd-9a50-489c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:14.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4bbe157ffc6543647ca9049c3ee5ca66d711e2bb7f17e014fedca7a3cfa0f82f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d2-e810-4011-a61f-43b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:14.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0b6344113f392f9fcbd9d3b5833ce2a6fd25260e7de6a08f4a8320e2256c6d86']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d3-b6f4-46bc-af24-4685950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6bdabf7397460a0d7a1093012116c84cd61d8fa10b01c6582d348a73fb6c846b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d3-b7c4-4b1d-948f-4568950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '379b2064ed3c457df96b3c410d0324b75d0e2177bbbad469b74f3073211ae12f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d3-aec0-41af-953e-413f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e4aa606c8dcc9e666b086fd1da27aa85722aa53ab9440b1625b78e06747197d6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d3-0ad8-47a9-a946-4823950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'dddff32cb1b2d0307321259d0903888f7beebfb6508da292091e707ea38a6fc3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d3-bc20-45ba-b391-4e8e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:15.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'a6f2b7294e270d3681d4bf9f7a4ff37537a809386587999bb8c2d4cf0e81a947']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d4-f8e8-4acd-8129-4fba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ab61ad1fda9194d19581a1014602f011e8c279483ec71a88d08de39b495e5c1d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d4-f040-483a-8e5a-4253950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7c98f1a1afdbb0eb7945570c683e4876786e6c1e675db97e3462b5664d7f0b92']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d4-d0c4-4e4b-80ad-47f1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'fed45a9c66f872a7cd618b564b6719e6c677bd854a2f3b1c81632668d1fc9803']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d4-55e8-4fa0-a4ff-4e24950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:16.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3b8b8ac6614d5a2891adc47f988deceaacce0b8925cdb5f5cf30c41b88df234b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d5-2b24-479e-80f3-460f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f76b125a25584f9f91d29fa5d5b14932084184bb78205a657235fed1d2cd69d8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d5-f6fc-4e27-b60e-42a9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b0e421db43b71718af6bf06b667659642dd68bddd513b4ad62d922d1f0c09b62']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d5-3bbc-4048-b8f2-4a2a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd581d7b834bff8f64cf7c1fad20430f7bc54c18ad1e08306d871ef6676cce31f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d5-49a0-4053-b37f-4a7b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '73799ea1dea5d9df99cc53a79672f63aef1a25c91c718234a4145eb28564e589']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d5-4fe0-4d66-a6e2-4e72950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:17.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '18fcb27f69177897f99b26e0139ebe5dc3ecafba15882a1e06a287b14ed4cb30']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-4410-46ec-83c1-4c5b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '49c0b9be71b0c444ed76ecc83a89cc8cb84fb916c52decc56b08756d0418a0fc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-f5bc-4d49-adef-45cb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '84359e0f5a05e716d657ec3b458cd909350c6c2ab5edd1d52c8fcbdd079210e9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-b130-4b51-b8b5-4672950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '120198b1b54cf8381283afee7c06f5e83c0503a1e99c8e63eb96fbad484c9eb0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-ff80-4425-afc9-42a2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'cd60aa7d2d72039495f7747ec229c681c73d99bc9a79f204a39d7d463a9a9d21']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-e364-49bc-bae7-4e9c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '98d5cf98011408b9f2da202600c20e0f3ae2643d62bdc8ffb025d22cb1300589']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d6-02c4-4b04-966d-4c55950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:18.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9f8a6c747d7ecd811a73dbedb1da5cf8850c861d29453c6f36d7347ec1195405']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d7-e8b8-4c3e-83fa-46ab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'bc09d80b14673f008757e321bedf5155683731a109930cc45bade75d3810e024']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d7-cdb4-4f9a-b5d7-4426950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'e18ded70e4534366e7793eb455d0bf7013a1971d69375aea64c3bc264fbc376c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d7-f610-421e-8bf3-4d37950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:19.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '593b37c83f59ad672a9e86e6d93c052029cc7a50b488615c11dd3e1b49e1bc6f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d8-b450-453d-af00-4c7c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '853085d9abcad44c467e99a47c6a2f79b9b7479aa340a76bcfd6afd38ab1d10a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d8-a65c-4f67-adfa-46b1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:20.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9281a34301476b13287400ed3debbb9fe6e2d94880b92b179ced240e33bded5b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d9-d208-464c-8a74-4cab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c52af0a71e46e63698263bc8bcc53f4b0a307bcd250ac1bff14f4e220a1188e4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d9-6388-4167-83de-4515950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '6bd0ac0c6efa2240598fa7c3773c4cf402056a48b41014821e71e81ae16a546b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4d9-5038-4977-bb2c-450c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:21.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c406061e326553c2c601eb4f85e0d33fdce2a48aaf801a38657df95e3a49f669']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4da-bc88-4d27-ac1e-4ab3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '95e06c503d163a20531516e570a3ef433bc72fd143ebb0d7b40b98508978f31f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4da-ef34-4e2a-8d17-4fd5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:22.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3bb54db547b7bbbb32124ce6040e3ee9ad7e796a1b58bdad7d660d9949ca9dd6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4db-9720-4ce0-acef-4d2e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '8a2e6027b8c58c35a074bd9cd9619f515248bd8ba5392bd7859a4ba9b1abe369']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4db-f82c-4db7-a354-4ea1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '90a9a0be49520c872d0a75f22809f341691624d68ce6ff89ec660a62d0106b3a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4db-fe54-490c-aafd-424f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:23.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd6aa89a9573e9d2818ea2222d58cc663079a1da4cc5fe8c2b7f7ea97103718b5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4dc-e554-42a7-81dc-4348950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'db46099b6046d58747bbf13b285999b3aa84a71656631ac9fcc4e2eb9ee72dba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4dc-7f54-4fe9-8bcc-4dfb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1cc4db1f101f261fdf9617dd1457e2505568956fd55405c19da4450c18464faf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4dc-5bb8-4ddc-987f-4b5f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:24.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'db7bff2a7fe7b45d341d4b1f5f240ea67bd2f626cf1964798b37b692f8726b85']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4dd-fcd4-425f-bb1b-4b4e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'b94cf13c9e9b55cb65bfb0b09ee7912a02434adc4bf27d804c88715152f0ddcc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4dd-9e14-4016-b570-4ce1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:25.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '81082ffbda2650c1390a3d177f4b29a6abe53d838f22e8d45020c0570645f9ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4de-0a2c-4af6-8633-445c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'afcbb77e7063a5386bb36713c8b1c9e3c236cf22708102d028ef6b4554089bed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4de-b9d8-4330-bd56-43cc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:26.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3f66a759b8cc023f5cc90d5e43887ee002beef6822867ce910e345d9105c5304']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4df-cd60-46cc-b541-4b9f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd8a96eccad3e0c85da48ff5ede2dee4aa948a1454cd8e591d5a486189cd798a7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4df-73a4-4702-9997-4f39950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:27.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd329e95e64e57d158dd0a97ea0bb3f235f27aad158da59b9ffcf63e8e4f98c6f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e0-71d4-4a73-b11f-4198950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd62ed988a6ef9bfcded580e3fbd6c5b286b831adccb84746bf620d95c298dffe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e0-4e48-4924-bbe2-4ecb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:28.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0166fa7230c253e9ba2b839231c4a45a77b1ccd4638e883d0cd0e18de394d4e8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e1-d8dc-4118-ba22-46d4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '580c33bb18d3fd32ee11176e458a98e28094570ae57cf8f5640373618545fb54']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e1-5790-4c41-978c-4aab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:29.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9d0d294a58e34ac6c76028c01d3730f3ef13404470ec469de0b366701832017a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e2-9450-48f0-86ee-464a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '971374527d4406e2f93bc124a6690cd977b464a7d84e7739088e07e94b4c0aa0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e2-b180-492b-9534-480b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:30.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '51e5cdb5b15af69b2020749ec082c8835211a5313e2dde2a38504011629220f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e3-8134-49ae-9708-4c71950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '85f5d9b9a2afc22291c7e8bbe93024ad15535a8a1bdfeae7250956794aeb3556']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e3-a3e4-4658-b202-4000950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:31.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '42506dea1a2c992f0d4cceeb75009d822efb6e505d56d06285e4acd10fa82a1b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e4-55e8-4425-b3a4-461a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '359d6713e3211dcca6a6b3774413cf6621267ce4a45bc30ce045096a7d26f137']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e4-7f6c-4676-b262-4c1e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9a829f48a22c2f551cd7595fe84fa5aa51f274281dda637c4a88c79feab1f495']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e4-5450-4705-8eb2-4c94950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:32.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f6150eff4741bc12acfca5530fe8379dfd147663a7d6541f0a6a60517a834030']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e5-205c-4302-a309-4e5c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '9bf2d9a0848e69e1219137625c356d706e18ee89ca40d40b9bee8282d861fe9e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e5-0b28-48e3-83e3-4360950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:33.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd6a8691a7764793db847827ba81ba0a2df26176ece0876a6360fb6fab9d39579']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e6-5bf0-4ca7-9dd2-4c66950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '29f502d26d59ef2f69014d601a46808950d00892b75433359320e8ed5a282f4e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e6-d698-4846-b2ff-4311950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:34.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'ee9da0114285db278b5a468a7f1dceac57c23f4b901065d8eadef0fa39dfd6db']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e7-3310-49ad-bfe5-48ab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '305bcc6026bbc23ee399556d04bd9e688ab2bd46b21ca0ac23d1c0934c09a6bb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e7-9798-4809-beed-40de950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:35.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'bd632d8f370afa1f02125b41fbbd35cb72fd8333848f2b471da2a52cd6fba1ed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e8-1abc-442c-8541-4d98950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '23c12048e0ab7b20bda279154c673b8b4054ab5e19acbe0146564866a4f96abc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e8-4e4c-420b-824d-489e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:36.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f738707c76082f8c70da1c6840d1add38c4b2d946bcd919a50cb3a22111684b2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e9-675c-4389-a301-4633950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'd8b09a39b955d164a62339024415f72a79da15729bfa81b95b31fb1f95463e36']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4e9-cc50-4408-8932-4429950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:37.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '1002140275ae2e8a89bdf9c6048d763f1dd71dcce1e5d0ce22ff8a8ec20cded5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ea-6dd0-4a34-bb66-4f55950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '31807918fa69c4090052a7f9ee32d9f6a1284287ce4d05afdb5cd87f9fc0dd64']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ea-503c-4b9a-ac7a-4dcd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:38.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '659ad690a4db4490af69111e8ff5a30feaf255b0ebb70366359dc8f590cef719']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4eb-4088-4273-9c80-4ca1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '3c3d071ef44ed668063d55dda90e9ecaba44b3997da114710a9d34965c93ca36']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4eb-9998-4c51-88e2-45b3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:39.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '70d1d1d561f8a9d06c485366b789f6b6e6ba3febf90cdf4ca900ef96aa93df60']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ec-64b8-4f5d-ae5a-4189950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'f65dcc3d0bb5767a518305fd408881e98630c4ed3716c8915d61a7495f5a6971']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ec-93c4-4f41-a205-4698950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:40.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c4c0ff103ddf29c92ed9c550acbb3a87b728f8fd0859bb0ba7a90f2c551f955e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ed-7c9c-4167-8f30-46c9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2a2b063e06e878dc2e9f63c3546370b540b9bf58c8e9946673200ffa30800aa0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ed-fe8c-4f61-a7b1-4015950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '072c0d91dc547764ab7f5fb1181606612613b7d80dafbc8dd47150513aaa237f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ee-06e4-4fe9-86a0-44d8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:41.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c32124386277fe9e0b05ee5b3f007ddbfa669b837909ee8e4d678f513bacac1b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ee-0b0c-4c93-9ee6-4ef5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c54ffdf658f228ffd60789fc7e81853ba6196df0a08fd97ec72969c428f70a6e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ee-f230-4d57-ad5c-4d2d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:42.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4ae437aefadb6f99db28fa7d9fe099b33e8cf98513606475070d0d824541ba2c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ef-64e0-44ca-89ce-4e7f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2a4c96e226be337c38b842b6f8fc1de151f60098c9dcfcc62cc60aa1d010d9b8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ef-9ef4-4608-bd9b-47ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '880a923211231ad3f375aa58e01a6f41ee9b863fabfe4daf30de88183e20a75e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ef-4178-43f5-a501-4a46950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '2d27fc913ce3d325476ebc1511cbe687b62568d6e4bc058eb8604857c928f12d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4ef-6e84-4c1f-bfd8-40ff950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:43.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0024d27614933d13f0ba3c380e28558d9470861bcced22ff2be822ec098a8646']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f0-dadc-4eb9-b2d1-479c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'aac3e54a4340549960127605eff38da1bf91531689ea35d1e750d0bf7323c321']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f0-4a44-4e71-b51a-4c0e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '4174d5998ca903811426307666a9ec3c99057fe2a70611d3a6d51f239ff3f91f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f0-9334-4eb5-8297-498d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '7a0533bef6c2d5b3366b3c15c303f855fe31b7872447bdf3fa31683efb82b757']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f0-de18-43a5-9a60-44fe950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:44.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '035d8f4fe7e27f4294d0e0ac15a8d451942b6cb02395c7dcb250f8cf0d292bcf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f1-0b38-4312-9cba-46a0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = 'c4257d68d6677e8086800cc2269e906271dcf3c1c00c4daeb7d0c17a21583b1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a4f1-c164-4e6d-a0cf-4e13950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:27:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:27:45.000Z",
|
|
|
|
|
"pattern": "[file:hashes.SHA256 = '0e80bdfea3b0f07d1dae27036ffd0bd9de585e5e628e062d4b1010f7db07b7a9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:27:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha256\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a646-e958-43a5-819e-46b8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 03998ee62fa733a11a1986fa169a7ecb9a29f7b2a15bb411dd94f394ee6e4f73)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b3280c76d9f4315b580c0190ac101f8b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a649-3aec-45a4-8fd9-4028950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 3112fcda22c2469bcdbf62ac9dd8404dbec89c3dfd06989ff18d16fc86a117da)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6b3130103d7f8baa8b98fe9286997d83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a64c-f588-4f1b-a385-4388950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 78249c1b24c0173d1e7e2f3d373bbe7866622ed064d2806fe621439df6aaecb4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e887d9443e2022e27a57a944907d0503']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a64f-1b8c-493b-9f4d-4fd5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 1fd893f3a6a8714da3b42ca85b2270c89bc53645f8fbb6c3aac5e8c8fec40af6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c02703ea82b715406030acefea07b169']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a651-c884-43a6-bef9-41d4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 770439ccabb8e74eefb58aaedc81701fb99b093a8bd843a799639b530bfceda9)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8a3365a0cbbad25b1fd4d387696182d1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a653-5740-4d16-9165-4256950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 880f2611c92fce7cf8a10c99e4b782831d40f28ba32de36146869c59d5ddfbf5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '87963ac6b7c26c641809cacb22ff8619']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a656-d4d8-4d1d-b267-4dd1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:42.000Z",
|
|
|
|
|
"description": "Automatically added (via cd78900093b6b3677ff366579e1d2f071f5e7a3f3bc4f4bd73e9b562377ebe6b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '717704548d08b3c33aa9eabcd63c5080']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a658-11c0-443d-b8c2-460e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:44.000Z",
|
|
|
|
|
"description": "Automatically added (via c9ee88f80505bb041d8355186890b624f3d52c906e6f1708c5997a24a06522e3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ff3c33413d8b216c50403ea6d98b3412']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a65b-dd30-4d7b-a3ea-4ad4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 5b5205adaf14de9550c855f3c260851ba649c8d095b7ad763efe71818203653c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f0ff0537386d4fc3dec79ef01886d0b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a65d-eb3c-4e7e-bf6e-4e2c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:49.000Z",
|
|
|
|
|
"description": "Automatically added (via ed531a1bbf63e6a689ceb85a664a2dded58b153ec14cd1aa284e89b8c239cee1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0538cd0a4440b339658629f39ac7301e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a660-ab30-47f4-a164-4043950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 50518a79eada8b8c5e9bf7beb060bcb7be8ac15ac76f09879342d626ff5368f4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1e45b5c62ed362586b82670276dfd80f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a662-c610-45d4-af80-4f7b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 21774c3c63718bb29f9d699ab4dd56e3e042cd6b09d0e380112cec797a2a7ec8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c5310059f876606e70ad40df25c3bad7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a665-6734-4991-8b13-43bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 51dd86346073cef7b4c5ff1cde8b1d57dfa246efd73c94559eac3fd52b738f8e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e9d26effb2c67fa88e5a15ed06cfc70a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a668-4c48-47d0-b480-4dba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 75cc8c6f11326612f0cf26c95de44dcfbea2c0d34af78f878ac97d13686a4208)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f28635d6a77ca6315352799f2cb150a4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66a-ab2c-4fba-8d87-495f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 2ac72896f8af7612d368bb4bcc7e431f80f111bb078a78218f04b4febe9bdba1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9bbc0fd4e649252f122fd70cb3ab7a86']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66d-66c0-477e-a4e5-4ca6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:05.000Z",
|
|
|
|
|
"description": "Automatically added (via e0f3004a3e916e271c37c285027c3d1014f99207886056de99711fb4a0cc13d6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f610b68b4f88dfc10369a52f981f9def']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66f-7720-413f-a3cb-46ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 8a7a1f181aa0aafb387e2b081d03550741d2ac4d3eee2b259a78786e66e79f56)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6861b90c659b2048d996475503b31331']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a671-1de0-4cb7-970e-4d8e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:09.000Z",
|
|
|
|
|
"description": "Automatically added (via db895a1cab8a980c621e379326acff52fe647cdea6673930568a81f166c17a2b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1d52f56aa1902908e74bd0d1c0f173a5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a673-2608-400f-9ddc-4497950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:11.000Z",
|
|
|
|
|
"description": "Automatically added (via ea7b4621e11c89f754dea401e3b89690ccf4b7c767c0aec2fb0a89893807817b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e8ac1131758f6c3094e9f1feb37ece67']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a675-39a0-4685-b914-42c5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:13.000Z",
|
|
|
|
|
"description": "Automatically added (via fc315ccc882c3706bf0b9edbc4163342c0764cfaf6983a7e8a1104682fa41eb5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8f23483b0bf89c41524ac6929ea6a66b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a677-7970-4781-8c66-461b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 2eb62083ac22f903c4ecfbb76a9e2a5443fc39136f0f1f49e4570e553e57c091)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '82cac2fa24ab2709aaabae3d9b8b61ed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67a-a804-4715-be74-4fb4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 57a2743fb4c4ab12de3e851387e1642bfbc280da3e7ea1693e060af11006863e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '686f2488e711b75a56ad44d1b174bf80']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67c-fdc0-4c85-bab7-4e69950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:20.000Z",
|
|
|
|
|
"description": "Automatically added (via a68cbdad109f02ee74b951995a6e4d05421f9948fb33db7ae1a82ab6275066d7)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7c0e7a868246fac23fa478b49b2441c8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67e-959c-4319-9a5f-44ce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:22.000Z",
|
|
|
|
|
"description": "Automatically added (via d62ff3d0ee12d95ed2d63838ed121654141674d30fc8c681634cc0e506e4627c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1353584be9d8eccd847d278faad414da']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a680-0a30-4b72-ad55-464f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 42c4e0fcbf35d70121f82017b92c93d7597690011a9246edda4094755d38cf4a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f0aa9a3b85c442ece8bf431e2a70d383']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a682-7e00-4b9d-9bc3-4d2b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 14edc6c728cf72cadfe2c6be335bd281719ee48af8876af47db2b63e28be80a3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8e7b5577b46ca3ec1ee90007a9c655a1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a684-88c0-438a-a1ff-4746950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d35a3d980a1284fa2f894e69e23bc47e43046032493a2174a31b76c11fe5ea2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2cf97ce54d59a213fcc32516fae57d79']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a686-be94-4b42-b3d2-4f03950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 905f3ea8aea0ed42a1d700051681ef39c7311d6e6b66f2d8b7c5bd651b295247)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'abbe17e3de9d276039c29397753361b4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a688-8b38-48b9-b96f-4181950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:32.000Z",
|
|
|
|
|
"description": "Automatically added (via e2eb3e8c5238ef530b0946ba5e4138ad0d501d600a018878549e0c5ecfa0225c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'cb57ac2cfb5bb68689f542c6694e5b83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a689-ffc4-4dd0-995f-4dfa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 73471b4962a9412736c7ea8a85b90d393522f7c54ae4d8352df3f9f779caeb93)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fdadad0392525c14d255669378c96bcf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68b-96c8-4571-a658-457c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 4a0852b334bd089cc3e06f2ec88133c03ed747e6206318ccd6ea58df17f1f45b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f266e8c10dc3300f509cf49d4978f972']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68d-bb14-4072-a14b-4c31950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 153f78aff7b18c3343fc49f2ddbff0e7d2e8d6272ccdeeb145661f1c55ed61c3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b4e386576cad82e11f9e403865f2a681']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68f-4bbc-40ee-89e8-4f37950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 9336b0c691b58ea0584304362087ef1a353c93bcb4781bec1acd0a10663f6bb1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6a18e1308e7e4cbb516f7dd9f71a0fa4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a691-b6bc-46b1-a50b-402d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 4b81675796064c1c77f158b823238357c981d18a17d2b4da92ef03459ac8a89f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '29ba650ca9208147c30f03f19bb44e2f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a693-1030-423b-85bb-4873950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:43.000Z",
|
|
|
|
|
"description": "Automatically added (via 433d29ad9252a9ee4124db989ae4c7dc95d58611ff777e76bf47f1765318ed3b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd9daa4257dcbfdd7e32e1695d2fef135']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a694-8364-419e-8331-4bb6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 19317455beed376a66a95a85b8e6c2420757aa6745a21e83dca364607e9f519f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b3f1d0bb4aa051c5442df84839054b38']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a697-a0f4-481c-a0a9-437e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 966db22f18650163c50094e47025949dbb2c0250363351d66130bb0319999f8f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f7f0639a2d428c13fc40b390883a0fc9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a699-f558-49c5-8253-4c9c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 93c2a208772480b64daa3b436142a3d0029219cc23f890584b2f430984f7fcb8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c4e1c06d020e125fbfa254b4173ef4dd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69b-54d8-48ee-b1a0-478e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:51.000Z",
|
|
|
|
|
"description": "Automatically added (via c0c1454fbdc2ca819cb4f4d2516c22902430fb127d3a6c9d0b02f45d3b223ee5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '66beff934d122bb5fdf8488ced398eb2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69d-9628-4616-8824-48f5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:53.000Z",
|
|
|
|
|
"description": "Automatically added (via 7e3cb5379ae7f066efb838e109ae6b0fd3b5d25c3e56ebf5ee964c5ef78f9f23)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '57af5de9c24835bfc4a285eebf0d40c9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69f-f85c-4685-93ac-4a15950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f73ce3d78d3c0b14a63ad200dfa8bdd525b565e1075545b74f24b31c7be6ca2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '07d130ebbf698ee28505d461bdb37e8c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a1-7028-450d-b41e-4948950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 69a826fa53e2e1edb913d2a0a4d76a64a445bd59da74423596c3487a23ed2385)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e0471dcadef1e989a24d75044b060330']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a2-52f0-48bf-89f3-4cfb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:58.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d6b30dcefb3203913ba69d2c2b57589f5dd9b564a5a54b1b184352766e17e67)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '913d010bad2e3114ad14e52801bdfe60']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a4-e0e0-4290-8401-4269950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 1e51349333f968f461f97544deb7098d6288bc6b835a12f0cd411955be641439)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '52a9bbd1dcd13addebd1b4715bfefa66']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a6-3cdc-4d3b-a275-4afe950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 1761d77a9112e8fffca4b33268a78e12b647f312c951cafc040aac9f1a5bdb99)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a4ab718bb5f487dec54d9475ef95c42b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a8-61d4-444a-87f8-468b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:04.000Z",
|
|
|
|
|
"description": "Automatically added (via d801699fc530ac61165a206a50d7c34630fcb5f845142e5f6451a87ff218004c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b05cc8aa1ab90c3a8f09d681c421d6d3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6aa-c6e0-4217-b881-4057950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:06.000Z",
|
|
|
|
|
"description": "Automatically added (via 79a6eba95e3bd532a721a306eb2acb71b56c9e45980e866d28e98a085ac528de)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '61af14c8b96554da9ce563835274cca3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ac-c6bc-4c2f-97d0-4106950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:08.000Z",
|
|
|
|
|
"description": "Automatically added (via 97b88c52eab6df19d597db8c7f1e8e2b1c3b0eea8ed1b337520b9fad41fb3c1b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd8d93170f503f5ed06f9548b06a27d50']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ae-0bb4-445a-a7a5-46fa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:10.000Z",
|
|
|
|
|
"description": "Automatically added (via a38d0e4d2ab3bcf98f9a87672ec39b4010afcfe8971476ca1231872865a1df7d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2ea6340a91112b55f253166033d9febe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b0-485c-46d7-af63-46ad950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f90b54a17b15a2629adec66cfd5f3ff6fa2e654e32413782dfb1521beb52c2e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e5631a05a6a92004174a22f5a958eef2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b2-ba50-445f-b12f-46e9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 080f255865dd4321fca02e5ce87683138618f9201fffe335eea4d05f1fc49beb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3149ad298c73a339dc0c466923f61091']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b4-7860-4d99-8f91-4e87950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 1e92bdce4f60a43e5bb71410f63b56b893f48bb35ad4ca1a93545d8f32f2f4b0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6f2707f547d07e536d00cf1573d18c25']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b5-8da4-4276-a165-4c7a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 968effbd6373260ca0f8a45e2d5035517c8ec1fe380f3d1be1aa8423def86357)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a7d2eab9d1ac68066ded9818a5881bed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b7-a7dc-4675-83a6-48cd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:19.000Z",
|
|
|
|
|
"description": "Automatically added (via a201c5272fc141fb07b622b1d73977acc7d499a118ff5e90e55a50a44780b32d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bd89ad697112c03e94ff240ccb03e830']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b9-0c64-46fb-9bce-478c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 15a5a2b65c8acfeef7a9470b28f7104fecb323fd3418a7f88e5ca012a351d85e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1dbaf4866cf195e71b87acb226f6a36c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6bb-966c-440e-a51f-4630950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 787286d71ee50fad99563d324bc4c2b65921f579d13a874cf854922dd76d35ce)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b4a0108dc8bc6e263a3bf1f2d94a7762']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6bd-9de8-49db-850e-4600950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 4938bd2dd8f0462e4c28db2b864ea7f3c2d40b60a5c0f4f2b2a0fe6dde82abed)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5b5dcc95c01f6c9c2371f2f8b77816bb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6bf-3568-4b00-a50c-4dee950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:27.000Z",
|
|
|
|
|
"description": "Automatically added (via d6a1e20a82f4a18626869d1b91e8fd192e1b444cec7020690fc5a3b0c79837de)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '44453804daa368d4441ed9c204fd8fa1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c1-ab74-4233-98ca-499a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 6631f2a0478326ea27ee1ab0abbf82948c74012a78f4d894be7d3e34c8813eda)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3fcfd38774893f272bbbeca36593795e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c3-4c74-4c83-bbfc-4a0c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 218ccc259ae78f482191602c753ede43eed873a47406792e8d5504e527bfea38)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c2e15d873436e048cad0fc13f64d6206']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c5-f53c-42d4-a8f2-49d6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:33.000Z",
|
|
|
|
|
"description": "Automatically added (via b307864a52f8686a858690237b7162c98745f08b462edb924b0c60b2b5838320)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c8334b22a71f31c77452135ab0b0c152']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c7-1238-47c3-987c-4a01950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:35.000Z",
|
|
|
|
|
"description": "Automatically added (via a5d5973e328b38d6def940c228d5b78803d1d7031ee4526ea2f7a0785cf3d70f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0c4ce3a5513c08690421de3c2b46ba32']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c8-25f8-4442-bf8f-4501950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 5c850750749954ac508dfeb756ddf071e304669fece52f6540d7d300ad10496f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ef890459ae55d755f69a958be60b52a1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ca-36cc-4427-9fb7-4dc9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 652a05db1d96a5b9a7ab04b66526626ed173847319fd933af2170e04b4762cff)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '633ee2667e0fc79134ec5c4fa8ec24b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6cc-6dcc-47a3-bfb6-4bb8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 69f0f24f9bba7b01ebe984086417a5144db5401f8fb9b4381cf488e58439d6c8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fbe411b3a6e8e993e05e8140f995f37e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ce-67b8-4254-9022-4ec1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 7655b8cf0033e8ec288f14aa1c6c45992fd4f47caaa440edb014427c6e70cb89)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ac05c1da3c7ba7450e5ae9e27eb7ce4d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d0-e78c-49db-ae23-402d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 1ce775962f1d90032f7f9a297f0fb50dd482ab3317df487c3691c34f73f1a38d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bb143a921d2008a4e1c71bfa45ed216d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d2-f188-4b43-90ca-4dbb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 4d65da438bd006054e3e42dfdb4d5afdd962f346ca1694d2bf35cc901fbf221f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a445690d94d7e9d0bf89e45916e215d6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d3-26d0-47d5-864e-4683950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 1af6c2f07f25398cd280be3d58a477463b1c400a903ff871b58d382d1dbe1f94)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd30a3dec7619491d2d3a9d77cf9332a9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d5-79dc-491c-97ef-4e6b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 414c1a7481c69639686007a42cf3a519e9a184cac87176ded4ff2ae3dffb6dd3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd4330275b87084af3a6201ce97366180']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d7-3d24-4fa8-b3ef-4616950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 24076aa26d86cb14330f8c540234ea2deac3825fe9c6f9b8579d22699be32853)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '35939e2de4bd4d2b427961fd5612ffee']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d9-ef4c-4e54-8f8c-42c3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:53.000Z",
|
|
|
|
|
"description": "Automatically added (via ff0c148af67071d03cebc2bfcee27353cfae64ba13f2c3fde4f9cfdc8b4c8e98)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '316c9e288b4b852868c5837c35ff6ae9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6db-a57c-40ee-b1c9-44ff950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 6cd3bc09b37d712173ad422288ee720dc0a63366f18a95c36d43784a03a9ed43)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '363e6e67cd157333ce8d13322fc1996e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6dd-095c-40cc-bfce-4028950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 078531cf6e84c9f8f55e75f53c78fcd31f55078216f743c6421adfa98cf06479)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2c2afc3ae8c46ec7abadea73dfe22157']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6df-3fcc-4072-939b-4e47950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 4787a196474cb8ee59b2a1c7e3c2f0e4cea4461304c40bb6a4bac5debd46765f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6dda6cf2ca450ebd81eab90f7c665c3d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e1-1c58-4903-873d-4c50950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 9ca492616ceea6a7b3f53196b950a2f84a7326e8fa91f70923a6ff407913c2b3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd9eb3eb16ec1e34ff0fa48a4f3790de3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e2-7e1c-4bb7-95cb-48a6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 201acfe7b6b05e6f7c6a360b873007c2381100c11837722d7d92ada742cdd336)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6054c499ce88a5a3e2360cf04f34788b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e4-edf8-4434-88ca-461b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:04.000Z",
|
|
|
|
|
"description": "Automatically added (via cff55274562b4835549d69f20575c905ebc1825a5e354e07a60a1cdcb48984f4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '031f7cedbb011d5a27ca911429d29f2e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e6-6840-4033-a5b1-4bc7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:06.000Z",
|
|
|
|
|
"description": "Automatically added (via 485ffde041120a00c13acef876774485fa746fe398debfea5e96020d33bd6271)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '22b93c2d8038c0250a182f448b66d5fb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e8-c49c-4a8c-95f7-4899950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:08.000Z",
|
|
|
|
|
"description": "Automatically added (via 489de3edd590b265b3e4504b5bd5018a7ad8a3f319a6313637787e5d8a58ffdb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b693ca74d60f58574274e45c766fe732']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ea-b5e4-468c-ac3f-41e2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 5576b2ff7ffca9ebce21bacaaa3121bb7a9afcc1350b7cdb95a950b3c8e5035d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2f523438f6692518baf0cc70a05b9af3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ec-69fc-4b10-b548-4858950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:12.000Z",
|
|
|
|
|
"description": "Automatically added (via bd2a5012b18fa551327dcdd7b2bb8dd765704b65bcbda9fa31306a71846ea1a4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd50977c6ccbef3ec6d13d20c350d7b7e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ee-954c-4fcb-be46-4b1d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 1dc9cf00d615a7d231ada341190be36224bd7811a3e00ab9cada7efc6c206969)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '26a67f6f503a9ab9e8918f8c91e43eeb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f0-a164-4c71-959d-462e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 986ba0643f2e162ad99bc58bc03832f6d4f44bf4d4725f6cb2bc7fd7e19d57ed)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4ec33af9d324c4810c235fc2dfd26c3d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f1-8498-4cf8-8c81-41a8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:17.000Z",
|
|
|
|
|
"description": "Automatically added (via c72ad1487ae2e24ff8c4f631c9f0bbd09825dcdc93e01450bae4db7cdd4c56b2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '10815da390c1a707b8d82342e938138d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f3-f968-4e3d-8ba5-4962950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 2bfa3f42d4762d48e986a25161a1187772edc4f712966b3a19a4652463496959)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '25fefda01e4c9ab0dfd3a8a8913c6b62']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f5-c3cc-41b7-9cca-4b2f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 341b82597f32814afa2b2538100945923172a802b3462af0b8e343dde80195ba)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2bd59610d6f56a62a529c5605f678b40']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f7-be3c-494e-a745-4e41950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 8c111551a53ca7d59bc5293653d0197fb9fd99b452a13518464cde1aca979507)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9b01c1619d1adb1c26320cc375ce14bf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f9-cee8-4587-a59b-45bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 270be8a8eaebe9e4d61274b118372e595adb615eb36f55f851dfa266f53c0991)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6f754735aa848577a3e7fda7d8cb2b52']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6fb-d0a4-417b-b6bd-4371950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:27.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c9d432acc9c396f54dd4f580ecfa607e636eb2212d7825f846d8b2054b5011c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '171c9eb81d61c04f71cdaa0a4840bcc0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6fd-7610-476e-8029-4604950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 43e9fed3fc3553c0ce1858a19af5e452b01bd7bf11354dfaf6845fd86f5917c5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '52a34538bba88cb210f6de1bbeed0279']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ff-5194-48c2-9504-4aab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:31.000Z",
|
|
|
|
|
"description": "Automatically added (via a881b05dd9c3155d97b75789a810b11f8fca745a1eca819ab336934367266fbb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '39d48f8f512508cff8550cdfd533b664']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a701-cf88-457d-bb9d-4988950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 5ca353453bdcfbe897b5bd1660698528f514da3875e87944f16f3aaf3446f7b0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e477a894491096f6b17fed0237234dba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a704-2ab4-461a-8b24-44eb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:36.000Z",
|
|
|
|
|
"description": "Automatically added (via e5f76f4c4b2e6ac365c681cd37530d14deb0f8d4767655f4f975806367ea6f13)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8373f56d74c380030dc45d3934e253da']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a706-361c-49f3-9832-4d3d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 51a9825767d2e2894fb9604d31da32e1f9b2c8a0424bcac2bc40a21a93ec3321)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7ed2f86a1f305544416e13b1b9781a0f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a708-a938-4439-866c-4ab7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:40.000Z",
|
|
|
|
|
"description": "Automatically added (via f9bb28dbe6d311f81e656791abdd8f1651f007d3ea21bdbe7f0f77b80c74e46b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'edd4164c2200ec429d26e41a2abe81e2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70a-97b8-45a8-9787-435b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d889a8b0d20632a7bc9b2118a13759cf0b63858fd15400ad5e84ae752fc9439)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'aebaef1cdc3c0a16fe9c712b333269a8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70b-47cc-478a-8b06-457d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:43.000Z",
|
|
|
|
|
"description": "Automatically added (via c70aebf342a2fcc2be318d1942581fc9b197e8912ac174857d42bef6a2723a1a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5869fde84c912309a4c44793d234894a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70d-37c0-4984-840e-4e95950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 6dc6a0d71ca831f50b3f50ff06391348943b460721640fde31725a4d3d45fc29)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '28964ac5c3d5dab2bcb9e10db80bf180']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70f-9644-4816-af81-4d27950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 1b789b375fdfe6da9c74013ae8aebc3dab2bcd7f014ed14437e7c9aa78f86946)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f7a445c187d962c001567d4ec922e5f5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a711-ad80-428f-a2ca-431e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:49.000Z",
|
|
|
|
|
"description": "Automatically added (via f727325dfe8c8132ad2b71c42c7dad6b62bb54292631b6812bf82288ccb1e223)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4f2715ff97d5840e48e6fd1e6663c18c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a713-a52c-4e2b-9b0d-48f4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 431fda6151e73be42660aa087d8d255eaf17dac26072a2762d4cd94211d8e327)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e3a1977c10b20571ad3f79c238a33197']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a715-e1c8-4d76-9107-4cfb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:53.000Z",
|
|
|
|
|
"description": "Automatically added (via ab7cfb57e8a713aaf4bf69dbcaefc1519c573f4844fb6d049bce938dc6910d65)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '22d7d53bc1dee21a4b30bf44aa9f8fe0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a717-96c4-4dbf-bd5a-40ae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 918788687c1586d6549b207a2556ca519a52a0ad7af4c9a48314eceb044b6391)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '91a3d29917dc399ecba918eac8aa618e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a719-73fc-4f3c-b642-4cfc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 5ea9872dcdb18200e0ec73c54b1720f4868a4d349ee38316cd58b5cc2285c04c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '05c02e48548b0eb326ee594fe4ae079f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71b-b9f4-4897-9c96-473a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:59.000Z",
|
|
|
|
|
"description": "Automatically added (via c6a0a0336c1b7feaed29e1544a6b679b27f7e5f25de05c5793f6fb822e1f3029)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '374cb79e24fea47c2f385c65adc49d1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71c-58c4-413c-ad45-49b8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 879aeefb89b793a6412fa2a03359d03fe0c63d38658cf7e8d405cce1aab82338)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '09bd9d1d47e19381c39ddb729c88ce3b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71e-9ef8-4bf5-8867-413f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 334ce8473ffc5bd8d6ba57f05526319cc3afb9035d5077678f175ab2e1401921)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5067589966b842b9b0632c28b7294b5a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a720-5258-473a-a623-4fcd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:04.000Z",
|
|
|
|
|
"description": "Automatically added (via 24af678eb0e604fe98c3b107ff584690804478a15280ca6869a0bc5628560518)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '984748b076a58f1b37dd219eb437e211']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a722-ea28-4a95-bba1-48dc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:06.000Z",
|
|
|
|
|
"description": "Automatically added (via b6a891a747201c388dc51154ad7afd9222e9059bdce4dc300d1f228942bb0053)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bacf8b46346e03544b9d7510a833149b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a724-ebc4-4586-82fa-4112950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:08.000Z",
|
|
|
|
|
"description": "Automatically added (via 5538209cbf28c038701986059c6c4927ff5ad524bd58b8dc1dc474c42955fa9b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '96a366e3614eabc62265cde210eebcc7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a726-20a8-483b-aa7b-41d4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:10.000Z",
|
|
|
|
|
"description": "Automatically added (via d178309a94fb42ab3d0508f67ff92aa2c3c63c7eff97131db2590bd6d5a8a70b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '85a5d1d3f9a46633b2116bce251a08dc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a728-a3d0-4270-8743-4d20950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 9b557ec889152f554ea407db214a1a4314c68d7395a2d945e16f56dbd045185c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b03037c27dbc197219396445423fc327']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72a-4370-4b5b-8af7-41f6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 97200ade9329be5d85bbbeec5e58b3ff79aacdaf145d0a961f8c751be9fb846f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '88f52d47ddabffd21f490a19cd04808f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72b-a0a0-46c7-a453-41eb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 3619ff07258fd788ca6cc7afdd677e7f91d6ac1b752af34ce80f6e0a9ae31a35)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3f692d583be2efe18757e9ae80c377d8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72d-705c-4357-b16d-4b05950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 92eb8d4d5864d52da34b6ce0652eb123c6740e2635720bafaedb0d978bb29358)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8df8fed49ad1a6cbb86a520965428455']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a730-1c38-4748-8a94-43dc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:20.000Z",
|
|
|
|
|
"description": "Automatically added (via ae014a74e6d8ee21b64d595101ab5a83b0d5af7dcdedd26d15254ef2a4ed2559)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3bdba40a9a0b51468b65b9d622da4a0c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a732-dbf0-480b-a4d7-49af950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:22.000Z",
|
|
|
|
|
"description": "Automatically added (via c226118deeedd237fef3801af689dbdae4c196ae7879f5138a322780462004be)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ffcce41d3b0b355c5eb4d1afb6be23fc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a734-4ea0-4914-b7fb-49c3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 2e21f9d98980fa3ffc04a0698cb3d666d586491b37bcd5ffbb41048549619e83)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2a2f02caab07766c445dad73ec122a29']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a736-7510-42c3-a2d9-4fa6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:26.000Z",
|
|
|
|
|
"description": "Automatically added (via a6b1055fae0ba588cfb1f6934d704baa522ed21e05dd5191d5a761a11457ebd7)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7fb7b7d52a5cb2e32a5cea28612077dc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a738-04d0-4c9e-b6f0-4e2a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d8220803d0125baa8f6a8c513f2a467492c4cef6bac87441bdd09c4841e5e74)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '149d35cca58661e597aeaf9b581e70ea']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a739-1950-4b5d-a675-45ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:29.000Z",
|
|
|
|
|
"description": "Automatically added (via fa357f4d21eb53ec92873c3c3acce687b66c526ef7eea35dc053c039a600e48e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '118d439e24c189856029bc5812de3c81']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73c-4d9c-40be-9792-4f36950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 087836e753b3e29a798f52476c36ee99e3a53f691226cd81fc45a86e80d8f8e2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1c536c46f13287c101c38e4a3e921e7d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73d-b6b4-490b-a391-4995950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 7a9c62afa8c71277752a3ec4e8a6e9dca38c8e6a8392601c44eed65a432bc4b6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '26f4d5dc04b6d884c4a949245ff737cc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73f-d818-40a5-ac41-4a06950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 59ad264a6b38f7b12deffff609c217ce1830a5269b119c8ce2ff96087b3b11b0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ad3bc3fcd527a4d70cb57321e4d9070d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a741-53f4-4250-b893-4525950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 850f7653b9864ea446a46039a3201c23da09e48e99d8eaa0f8fdac04b61576d5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8c253c80c83471dd5011b71fb26bdbc2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a743-30e4-4d44-8974-484f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 436460681e88b3aedd2bed3d40f6d1299d0f9270a935f0bb230fafa48b73f221)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '912095232ba7704b504ac0379cfb3e92']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a745-f1f0-4dbe-92c8-4696950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:41.000Z",
|
|
|
|
|
"description": "Automatically added (via be3f03a0598ff967642a4ad1cbb622b18fad1ce03361d0f00c37a53950e33c5d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b6e27d7a985ee7f54174d7d0d2fe5bd1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a747-8d54-4d9d-9853-4e8e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:43.000Z",
|
|
|
|
|
"description": "Automatically added (via 664933e1ad1b406fcda058a5d1a148aac1b8ffc4c515a06913204876b5032207)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8e896f1f2225d3dfba96885969e2ec7a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a749-2264-4345-9193-4431950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:45.000Z",
|
|
|
|
|
"description": "Automatically added (via de915c7d8e640f2e501084e42d38cb5706a9b2fc8e0f5d9680844bf61e6a2112)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e29d74b7f54b3ee78696feac2768ee58']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a74b-6118-4a9d-ae4d-4291950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:47.000Z",
|
|
|
|
|
"description": "Automatically added (via dc37f3d97778dfcd6e787fd1f181dcad01e843afb646ba8689adf9dae9902aec)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fd7f358705f5fd6bb6544a9c60d824cb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a74d-a530-449c-ae43-4ab0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 085484195db75cf77e2fd8b15f048f869ecc4da172ffe7f742494ec0cc5c728c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0f72ae47a704bb7e478c5546979df105']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a74f-c708-4573-aa49-4de9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 8d8776e392a8c99b7049a94e8f937424392d3069199bc60f114aba7f8d0f1d8a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4efcb0c33c3d84f4d1fe009bb5d5febc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a751-d33c-48ca-b238-4cf3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:53.000Z",
|
|
|
|
|
"description": "Automatically added (via 4292cbefd9a7289f7438114dc98a115c106fe0108781ed4918c37a55f2fb5e5f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0149e24414bb080089cb6e8ffff6c036']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a753-3da8-4a69-acc2-401c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:55.000Z",
|
|
|
|
|
"description": "Automatically added (via d223438441cba166c5cf2f1b3dd4cab08a807d37d15e9363137396112265bd61)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9f841bc7f6bf806c1fe81d67fb444342']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a754-7864-43ea-a812-4caa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:56.000Z",
|
|
|
|
|
"description": "Automatically added (via e025fd396ba56af87e4c13b06bb603916c85c2a1cecae0fb0dbe7d5a000c7dce)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '995a6f6d1b9d49c290f9e49abec36244']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a756-ac88-4ade-ae9a-46d5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:58.000Z",
|
|
|
|
|
"description": "Automatically added (via ec083b0c965bc97d2d87ef713a0d9e741203cd02cd1cbba28b5932aaa2411b75)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2e2efa6b29c75b7a4d6f7e5f5c6ee823']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a758-c9c8-42bb-81df-47ae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 644ee3318813aa46b1a0b7d16bddcfeab54351eb2f855fa147dbdc2f6bc26660)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '25b3aeb333c706c5ba565cde37f9186f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75a-29c4-41d4-850d-4be0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:02.000Z",
|
|
|
|
|
"description": "Automatically added (via d5c972342a185e81a19becd9ddea2b7330ae9300187333ed10c7c6a86be81375)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '97c71082c11d6ea8918410bc191cfd28']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75c-64d4-410b-a63e-4279950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:04.000Z",
|
|
|
|
|
"description": "Automatically added (via 3c5a2f843f24501925dac2e155b53fcc0390da898f846be81695a48ad7e466dd)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e876682f476269ea42a3a98f16883f1b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75e-bab8-448a-b642-4365950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:06.000Z",
|
|
|
|
|
"description": "Automatically added (via ea038dc5d03d4e5cefa9e73b4ec5424b681c7d43c0176c61d97c58ea4ebcfda0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'dbf5fc3128052e3a85cf28845543ca6a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a760-d534-4482-aa43-403b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:08.000Z",
|
|
|
|
|
"description": "Automatically added (via ce27fd54305fefd606a73c8ccf85f29fbd977a40ca164b51f754384b5457a1f8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '044b9cec14d55900ba1ae9ccc792db7a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a762-1c0c-49ab-9990-4cf7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:10.000Z",
|
|
|
|
|
"description": "Automatically added (via d8ceec2cdfd50b4ce031b78fb691b71c084bc9be016452e75631b857bcb55dfc)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3d67f1da292d44bef21d843603eb9da5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a764-e2bc-4a28-a6b4-40ad950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 7372c6b86589ff6756e0889860d9155122dc3b86f9a3be58e8adc7eaa7db6c93)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '66c83ba12c81d74ea4a7b7d9f2b4102a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a766-ef6c-4061-8476-439a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 46c060d467675f9cc7daab832a2165ea626d1ea7abfbbf568da70c87a1ac7755)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '247c751e04b9773678bdf118c14eefb7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a768-3c8c-4f70-93ab-48a1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:16.000Z",
|
|
|
|
|
"description": "Automatically added (via b9954fdda438e064d41c67d2c38634fe7301050534522fc454c445941f851af4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4651d4ced0c5fc09f73cd9731c825d1b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76a-8f88-4def-8d46-445b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 815632c2cdb0b8434ce4c3579d0869eaaf21d203e0c01a6cb161e946bfbb3abd)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '799dcfb156fefee6c23f1c7c02d028c4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76c-9a8c-4ea5-b305-4e3d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:20.000Z",
|
|
|
|
|
"description": "Automatically added (via caeeb5604abcf212e0c614e9aa1f2e428ab77b09916609f6fc3d6368dbf172b2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '705342b8e329e0b1677eb90fb37c692c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76e-0628-4964-a056-4b14950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:22.000Z",
|
|
|
|
|
"description": "Automatically added (via e4a9567cf41b8ab99099cc9288173271b6d46ea4049345bf8741ea2c31c1e449)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c56ffa2bd1d57e4518a66b9054257603']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a771-13a8-44dd-a53c-4c29950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 345f8c5e95818db45377ba4ce3aa8115d297c2fa4e5ea50b688a66130862c481)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a8047ed3ab6ebf5d8a1dc8df9d5ac49c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a773-d694-4c6e-bb4a-4d72950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:27.000Z",
|
|
|
|
|
"description": "Automatically added (via d79eb7c62ea8947525f55d81187f1eb5be7dba3088eb6e5a8fb7bee23dcc9640)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'be8b5294d41ec73e1191e95f01d840ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a775-8464-4c18-aaf3-4b0e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:29.000Z",
|
|
|
|
|
"description": "Automatically added (via d76d5ecc9f11bc663932e31a9525306a328073ccccd547b61ee570ecfec7c176)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd13570541ac775aacd783091fb5ddd71']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a778-31b0-49bf-99ba-4c4d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:32.000Z",
|
|
|
|
|
"description": "Automatically added (via ce22ab2602eafdbbb5deae26e42308d85531daf19bad13f494552e3b44f16158)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5d6c3180398f37186b469fee563b5627']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77a-ad4c-4a3b-8f32-4374950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:34.000Z",
|
|
|
|
|
"description": "Automatically added (via c14e8c94245f23b880dbec5322546248a09a06e4dae5d10acf02b27081586bfb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9603525c4cb3ee4cff0ef3756ecbae81']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77c-c32c-4be4-9ab8-4c24950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 02b451de4696ff472a87e6c2e85d18110c8c6a1dbe74e138ca41c465b4131e23)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '78d1a5919af01580015c903a4c5b45f7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77e-631c-4121-ac55-47f6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 579826fed3c3807f42985072a5665edf6f9eb0649366d64faedde283dcf13adf)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8f89e6a4d3e26c1b75c2d161ff32fb3d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a780-bf0c-47c9-ac63-4071950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 85b61b8f8aee1cf63f8cfd5155c42041589609f517878c871f5fd6c610c136e0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6dfaa0a5774384c41299aa09ba972c93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a782-15a0-4a30-b86d-4a88950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:42.000Z",
|
|
|
|
|
"description": "Automatically added (via f6409eeb12e6b1171fc99cbb9ac4c4cd668bf42d2b3d426965f6ca1d2b01959f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '33bbff3ddce1b5549a0fe651a597484d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a784-f8a4-48c9-9dcd-493b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:44.000Z",
|
|
|
|
|
"description": "Automatically added (via cb5cde5bf1637cc81aaab6629c06bc029ad128ad9125b9f3fb8b92361ee4404d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bb185aafc27446efe93a1ef1aafc1ddd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a786-a52c-463c-bd2c-42db950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:46.000Z",
|
|
|
|
|
"description": "Automatically added (via a21feaad209c39e0c6a069b0cde4e027de5c041b6363228584bf6ab64d2e4ad3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ff5dee45b2128fb287bb177d6549abdc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a788-f0c4-4c13-9528-4a66950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 10dd16fe432b6f7aef6d917017264918eb92dc2d6ee71e6a73a8af203b0a83d8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7ecbc54070538124bed6abf368284279']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a78a-7e6c-4397-b9e3-4b85950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:50.000Z",
|
|
|
|
|
"description": "Automatically added (via 151eb1a5da6f004175cfbf9d4bf171ee01fa364d07c530e824441afab248ddfd)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '18bb8d9233900bab431342940231cbab']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a78c-06b8-4c21-94f0-4dcf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 16bc5785ae22552a16ad8337bcfbca661eddc4460084ea7f83c9e90ecde373ce)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7863e21865fa3c10d5b9bc765cb9e1aa']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a78f-1478-4a34-acb2-45ed950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 10f11fef194530bd8aaacbe60664a21a6e227d2cd3eea940a4a85049adc1a6d4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9da4ad072e1f6e4c6b6d360a3fd7cdc2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a791-5a64-4ec9-9945-4200950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 61c3d9a4e77e01650126d515895ba8b81d8347ed6077493a920bd19a7d50e926)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '778fbb403ff1c16b4612bc9af67fbdea']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a793-a08c-4966-81ee-4e89950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:59.000Z",
|
|
|
|
|
"description": "Automatically added (via dd5041e09b0d3eea9e9e25dd2a0b102524bfb858f650a5f2bc6e71fa5937dfb0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '657a0117b5501eb1f15ea9567a473903']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a795-cb44-4101-bb0f-4af7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 9ce17df875f59ef1a872e43575210990032a6df9ab35b6775b9fb626d502e15b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '94f7eccb4126ed8e5ec8b11fef4ca029']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a797-6be8-4785-a637-4d73950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:03.000Z",
|
|
|
|
|
"description": "Automatically added (via d1c948c139cfefc03df11f9bf2bd16146b6d58169b1b1d7b234b2c4a13ed3f86)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '723d1037b641658723e4604dedf98cfd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a799-dafc-4db2-8601-4b02950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:05.000Z",
|
|
|
|
|
"description": "Automatically added (via a574fdb8afd4a58fc27eb11e8d04e4f1455fa32d50a4b2761f990655365264f2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6787b4018ea20982fd5026b08ae1dfa1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79b-eab4-48bc-a361-4235950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 72f29a2af1a62863fd57fc09873d1b0837469e4d0be962da432895b415c8c73b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '457c79f9fe59dedd72ba46f473fd7ca3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79d-6af4-4607-b153-443e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:09.000Z",
|
|
|
|
|
"description": "Automatically added (via 8f44aed5853fd488406e04353e243fc057b6a625177eb6e635452cba5ef70ed6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b0310c91e53f7108bd80033fee905596']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79f-59ac-4413-9eea-4256950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:11.000Z",
|
|
|
|
|
"description": "Automatically added (via b1d6774b0d5f88ceb924be6f4fc91999bea4fed8fa5195f902a484f60764632e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3f0ad81d9e0d6a62ebfc3a98a2c00209']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a1-91dc-439d-9261-4299950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:13.000Z",
|
|
|
|
|
"description": "Automatically added (via e43c76d73d6529d458e4c31dcbafa0d86a8a1345541919aae99ad7597227933d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a67464385027ea304385997be119929b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a3-ccf0-45f7-b7ab-4fde950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 176bfc4538b7f8954ceb71c9672a3c2e95195960e45bff9d492ad5ca04fe859a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7318c66fc4ee63c376017d9f6f744ec5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a5-6f28-418d-b92f-4471950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:17.000Z",
|
|
|
|
|
"description": "Automatically added (via d32107885642843505efe42d213996ae4bb0fbbd8d82484bb8fb329f627b75db)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '328ff1ca113a663fa8b6893121bb720a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a6-0904-4500-8b41-40fd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 7993a8c8ad57ccaf98d060bbc4ba51fd4c9459f5b9c126570aacb4517dfbef35)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'add387fd281d5a9170a8dbfd71167578']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a8-cc4c-4598-a631-4016950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 50f635c018b46224f395a691baadf9c18e1dd31af0927fe5aa95c4dbdb149f4d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f940428adbb39f1713b430e1f92e839a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7aa-4fe8-4727-a6df-42ed950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:22.000Z",
|
|
|
|
|
"description": "Automatically added (via 2bff7b36d402c5a8951244dfe527a6b90431c051dc0771ad0e60243c011959f8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c43730a0b17485aa3186304daf0c1893']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ac-d3c8-4fa3-ba55-43d7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:24.000Z",
|
|
|
|
|
"description": "Automatically added (via dba6edef542290e276be055bc737a49905eb7283f818c852917ab1883c938eb5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e8f4cd82cd4bbf6e171e11982af9d15f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ae-457c-46b7-b7d2-4804950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:26.000Z",
|
|
|
|
|
"description": "Automatically added (via c5ed8f4d07604827d7eff84aefc96c6cc4c138a8b535db63b9f4519b2a570d78)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd4653b3d136bbb64ace3be0a3db09287']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b0-515c-4da8-ab99-4fe8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:28.000Z",
|
|
|
|
|
"description": "Automatically added (via eaabe75a6e62a4663d17c38dad014cfa2370429112754d0c4e8ff9136b61eb67)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e4d408e16f054708be478db2c03099ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b2-0dd8-4edc-a8d6-4ec4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:30.000Z",
|
|
|
|
|
"description": "Automatically added (via b981078d713a694962f3fdec0dd570a74950d3ec1c1a2925ba98dbe6bc87af22)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c7c23a7975e96a0c5ff5d409198fad25']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b4-f3d0-4a60-bd54-4638950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 4f5bbde33a425bfd7e48eb5a74877c104eb2d9887770046e4fa083b44f7017b4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5d464d05b2084a14cf7061087be120f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b6-3ce0-4817-bd8e-45ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c07c853edbc2b7dcc34d2a20bbfb12ef46c67e2424b8733a100b8aa2672dca8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '56a07315ed3adde234473860e9edfbf8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b8-2218-4ecf-8483-480a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:36.000Z",
|
|
|
|
|
"description": "Automatically added (via f6b287ad5cb26e44527c1337ce1c61f3d175b8862ebbca5e65948964306708cd)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '136012278e4b3359ed2286f57e0e3be1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ba-8acc-4423-8d60-4993950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 95a4efef00d50dcb48df51b94750567914e9aebb93f91b22152f40041beb65da)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '94871b9718fd12d466af0917ad7e911d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7bc-8990-402d-813d-4dc3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 19afc6355e3be42a38c133de279a9ee2739b22f0f022d68f9b60514a90155e99)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9036eef9a776321f569e1d548b7ebaf0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7be-3260-4392-b2ea-497e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:42.000Z",
|
|
|
|
|
"description": "Automatically added (via c097290074588cc7fd1e8a103beb052faf38c6f7a2c616c2a4505b1b5695ff65)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9df5dcea990aca90456eb71d5ba39691']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c0-765c-4927-aa77-4c1c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 568e5fd55ce5b3c00e81c4e580da7fb85799cbfd214737e9d831650f309b7f5a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd3b95f952250a3ad83669a606aebb5b7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c2-6c70-4448-9a61-42ad950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 44996598c59fe3b9ff3b5cbe4a6777cc02785a60c52f203c7d3e063f77eb259d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '312812b53d45bf543cc12a0c7576a022']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c4-c728-421b-9292-43dd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 2c7ccdeb5897e3b67ef42fb51c2a60f52a6bd6ced753a82cd0b7073b75b71959)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fa6741b1b991109af5294d8987250582']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c6-be38-4ab6-b5dc-49ce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:50.000Z",
|
|
|
|
|
"description": "Automatically added (via a3af90d162e1d51cb5c878fad0ae085c1d504ef4f662fce506600209a4e30a06)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'de67e9cb4264ce48ed186bebf84d753e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c8-6e34-4dd0-97b7-46bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:52.000Z",
|
|
|
|
|
"description": "Automatically added (via c34469e9cf98f82f58c8f6df110a4312b6426651046e038b98a477c5bb41dce6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1f79a951c2acdce7cb3156f1c93d828d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ca-93a0-45f5-8299-487b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 105afb14864da6ebb23d21f3bb1a5b2a516e38f7d57d5756e317e5b10028943b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7e8ae31815e44e5f9a282ef83ccd9cc5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7cc-0c80-43ab-9916-4401950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:56.000Z",
|
|
|
|
|
"description": "Automatically added (via fd137fe199b9a942c82c0200241d22ca94990aaa6b0f47492a1f5e494ef58c3b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '262f0a0c68991671491212f0355df785']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7cd-40e0-4f1c-932b-414f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:57.000Z",
|
|
|
|
|
"description": "Automatically added (via f72ac76104154b86e85b1afa837e94510335851780080743fe611e07b6ff79c6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e943d4230e6f34e7810bdd21d53b66fe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7cf-70a4-4d6a-9cc3-4fce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 3fb872e1241a82d6bc0e91a4ef439760aff88e7cd0d4e07e711b8ce5ce6bd75f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '45ff05d030d690aeff3233c113eac1a4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d1-9998-459a-946b-4142950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 05e83fca5cd522ceb94133e8c27c991db4e4a272e995e83f0f9c045ef8deb38b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'efb720853145119e4c7de00da274966a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d3-7018-47fe-bc8a-4af0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 951851d14a03da1106d010d7b957732dd25793d8ac2c3f3acc14f04b067d9523)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1dc67b067d2e6b9d9caf2c41fabc4d4b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d5-7d0c-475e-81ed-41e8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:05.000Z",
|
|
|
|
|
"description": "Automatically added (via eb6a88bbbe752253aece743442fcbee7cb205a15780065279deac0484ea4107d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a239eccd934f74e6994f4552f2a1dd62']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d7-3be4-4940-9cad-4e93950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:07.000Z",
|
|
|
|
|
"description": "Automatically added (via c76a695d86d2cc9ee76d2d4bc84f1d5a17101158357e73a48f3f1bc8f4facda1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9476cf1440b8e6c9b47d1f22a1353685']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d9-0a70-4579-9904-4fcf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:09.000Z",
|
|
|
|
|
"description": "Automatically added (via d704090175212056558c4f274a4a27acd6b23aec8ba98349ff27eb53477f4b0b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c312881092c72ebddb7fba86d78088af']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7db-c168-4f22-8a02-4963950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:11.000Z",
|
|
|
|
|
"description": "Automatically added (via 7e462b671a8d05eb38a5e66c5e8ad43c2bd1ab5588c04c56a2326f69c79440b4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1258fc984bdf61b17c12f150c51f9080']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7dd-ade0-4472-a4e8-40aa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:13.000Z",
|
|
|
|
|
"description": "Automatically added (via f81c6d59bfecae0b39bfb7cb1f30f686ad8b6b72cffe09407f06023200478758)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b74539c6b6f593b7eb95ca8a7c5af686']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7df-6bb8-4b54-86f7-4ddb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 1fd1ecb8b7c38b21bcafdd41fc599e0707ca972d0df33f76e32fb5c0e122d875)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fb6c48c07529250d9a56ba9cb3a1fed6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e1-017c-4746-961c-45e7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 196268250b88ea6a1f42d45b968257c6bf8351a837427e81e657bfb8384bdab3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7607bed4ed3ab12504a011bf096d12a9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e3-9800-4aeb-96cd-4a06950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 321325d931ef803d5a871ed35a6bd4fdc894afaf73fe1519db38716b04be6195)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fa441e1233b9a1daec2b5c46deea2f6b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e5-2148-468e-ab70-4207950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:21.000Z",
|
|
|
|
|
"description": "Automatically added (via a7ba19f08d8badc8c212a5b1535c5691d83442b51fdd0431dd5ad30fbb107bb6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '28247bbd0c7b6afec2e311f6a28e640e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e7-1490-432f-8ccf-414f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 03048369e3853dacc6871b81fd2769f36be1ca282c11cca2ffae5ecb0e41d4f1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4f4023ad7f38d660359c7f94e871578d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e9-003c-45c7-950d-47b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 647877d4605f0bf20fb15c7dc19b80579003c8cb44f2a7c88b3fe3ccd686cb8e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ed0dcf2bf3657aafcee684b74bad33a7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7eb-9b94-4925-a1be-4f85950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:27.000Z",
|
|
|
|
|
"description": "Automatically added (via 226b73231ac077ee0465786f95266f61c2fca5c8919e6a84bd626c0d6d42705a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e13bb890e266767f7eb23d7ff4f14a6a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ed-6b3c-4a53-9196-4b89950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 812b0a04dae91df7208bb9ce6d3edfbc6fa925a07db89a319e13dabcc40935a3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2a255bee1e60604d706a80a55ebc65b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ef-419c-4fdb-a936-4f4d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 2b257bae1108d54f6d97d8332dd9c57bc71b4eb42fb9bd6755b1156339aaba18)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b0d124dc300f710f64fe9fa0603e2e48']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f0-ee8c-4614-ad3e-4dce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 4fe5247caf0f041aa7684b1eb771c264b1e3b627e5c5d06178e9199cba5843d6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0a4102268a6b6fa0474f9f2cdeade88c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f2-bd98-4f49-9730-4517950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 7cb91088002641b54684a582654d9bb1d34fbcaa6c1d379dfadd8f88e9297e19)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '559a1407f876dda7d97937dbdb73f15a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f4-c3c8-4b4b-9c72-4754950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 490c494600e98e8e276520b0f8407b40695e4589a9df33cda154856f448b2a17)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8a0b3835abc71986c7895d72de9bee8c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f6-2b48-440a-ac7c-4f3f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 09113e85de49dacd9d65c1150df7039fb053ee7a6ee6e37a1b24535083cd5284)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '67704bb3875985798421a4bb3b624a32']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f8-66dc-497a-b885-4a54950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 78777a42f9d59926fe2805c03465852e88cdf70ec7dcc99466bcdecb1033f78e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '122a1273eee2a119f18363ef6bf03b2a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7fa-7bb0-491e-a585-43e2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:42.000Z",
|
|
|
|
|
"description": "Automatically added (via d774ee440c71d33604d56e384b737b8f3983d702188c23e034ad9bf947cc46c2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3612e2d2757d6e7b61baea3dbc44b175']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7fc-8b18-424a-8769-42b0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 7f87ef80c26699d89b6d71412c8b8389080a654f56a6c58edee95869a3513b55)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f00114d5961cecf5079afd0cf14a0bd2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7fe-c9ac-40a6-88c0-4c3b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 16be093da0780e5869c6a60450408c6827f6f733cb94b56dc3f79263fb8f9a83)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '859ce1e8868b637e8d26fcc020fc658e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a648-4714-4e32-bc87-486e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 03998ee62fa733a11a1986fa169a7ecb9a29f7b2a15bb411dd94f394ee6e4f73)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '203080fc0977cdec8f0bdbf10ef1c4174e3223ec']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a64a-4764-49df-b61d-425f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 3112fcda22c2469bcdbf62ac9dd8404dbec89c3dfd06989ff18d16fc86a117da)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '848aae3d581ad140629cfd149182170dd5ad7572']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a64d-a07c-4180-9318-4406950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 78249c1b24c0173d1e7e2f3d373bbe7866622ed064d2806fe621439df6aaecb4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '928b6212d10f0267b7ebacb86b169f885d4e2e07']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a64f-5258-4509-b5ab-4f71950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 1fd893f3a6a8714da3b42ca85b2270c89bc53645f8fbb6c3aac5e8c8fec40af6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e361f1b9439784389c3dc7aed953a72848d73806']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a652-d90c-4b2d-a134-4f47950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 770439ccabb8e74eefb58aaedc81701fb99b093a8bd843a799639b530bfceda9)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '60b6692f4bbf3bb9caec761e0b5f117c424096bc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a654-27f8-4811-8505-4100950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 880f2611c92fce7cf8a10c99e4b782831d40f28ba32de36146869c59d5ddfbf5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '938f996fc5222a87cea97d5341c9c8f64165e5c6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a657-db2c-47b8-8e5a-4b9f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:43.000Z",
|
|
|
|
|
"description": "Automatically added (via cd78900093b6b3677ff366579e1d2f071f5e7a3f3bc4f4bd73e9b562377ebe6b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd4acc5a9259df12f0df4c669260040e6cfb15eba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a659-c56c-491b-a137-45fb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:45.000Z",
|
|
|
|
|
"description": "Automatically added (via c9ee88f80505bb041d8355186890b624f3d52c906e6f1708c5997a24a06522e3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6a222a301c7fecd75d9f78513f195416c6dbd695']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a65c-b194-4208-9d24-4996950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 5b5205adaf14de9550c855f3c260851ba649c8d095b7ad763efe71818203653c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b1dc2b851c75b850fbe28ab707891ea2adc820af']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a65e-a76c-48f0-9018-40ff950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:50.000Z",
|
|
|
|
|
"description": "Automatically added (via ed531a1bbf63e6a689ceb85a664a2dded58b153ec14cd1aa284e89b8c239cee1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4dbc44c02b6081f4ccd4392d5ee5dd481828e2c9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a661-8ddc-4284-ae94-4169950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:53.000Z",
|
|
|
|
|
"description": "Automatically added (via 50518a79eada8b8c5e9bf7beb060bcb7be8ac15ac76f09879342d626ff5368f4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9703f747591ac126858ef88f37a0c5d34ab3c191']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a663-0ddc-430f-b3e2-46d8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 21774c3c63718bb29f9d699ab4dd56e3e042cd6b09d0e380112cec797a2a7ec8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6483224520f47a948b24714dd3a63f5e79fb8a41']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a666-4678-4c2f-98e5-419c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:33:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:33:58.000Z",
|
|
|
|
|
"description": "Automatically added (via 51dd86346073cef7b4c5ff1cde8b1d57dfa246efd73c94559eac3fd52b738f8e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e0fd83c14afa670c18b59c37966a4a3692452abd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:33:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a669-5f80-4e9a-ab6f-4f16950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 75cc8c6f11326612f0cf26c95de44dcfbea2c0d34af78f878ac97d13686a4208)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '51f7de17353ae53d2dd2bbc074c10246290b632d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66b-4c00-43ec-94f3-4716950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 2ac72896f8af7612d368bb4bcc7e431f80f111bb078a78218f04b4febe9bdba1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '12eccb6ac7c9c8825ccf52c22244a71f58e68ff8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66e-1774-4050-b4fc-4186950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:06.000Z",
|
|
|
|
|
"description": "Automatically added (via e0f3004a3e916e271c37c285027c3d1014f99207886056de99711fb4a0cc13d6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f02b446b9628e9b4e45787a71e9c75f82ac66b0c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a66f-9644-46e1-9ce7-47d0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 8a7a1f181aa0aafb387e2b081d03550741d2ac4d3eee2b259a78786e66e79f56)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a2a9c6271074d0cc5fbc13a542043b9ca6766a17']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a672-9120-4961-a17e-4adf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:10.000Z",
|
|
|
|
|
"description": "Automatically added (via db895a1cab8a980c621e379326acff52fe647cdea6673930568a81f166c17a2b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6540f13be36df89365b1d988bb4832002e8d5085']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a674-ed74-49ca-946e-498e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:12.000Z",
|
|
|
|
|
"description": "Automatically added (via ea7b4621e11c89f754dea401e3b89690ccf4b7c767c0aec2fb0a89893807817b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '07ea63e7506d4d97d393ea8dac0a599f420459f8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a676-81bc-499d-a113-4551950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:14.000Z",
|
|
|
|
|
"description": "Automatically added (via fc315ccc882c3706bf0b9edbc4163342c0764cfaf6983a7e8a1104682fa41eb5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '336c0417b58217299162c7c9cb10aaea5f778971']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a678-ed5c-46a8-88e8-4439950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 2eb62083ac22f903c4ecfbb76a9e2a5443fc39136f0f1f49e4570e553e57c091)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '069c7872242b580b07cae61d3738628a6353a1ef']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67b-8f40-4a8c-b5e6-4dfa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 57a2743fb4c4ab12de3e851387e1642bfbc280da3e7ea1693e060af11006863e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4bf929c90ee8d574506d900e12abd631e46f2485']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67d-ec50-4837-a3cc-4681950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:21.000Z",
|
|
|
|
|
"description": "Automatically added (via a68cbdad109f02ee74b951995a6e4d05421f9948fb33db7ae1a82ab6275066d7)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'cd6ad84b76e726cbd61e180b1e2ec0415e2490f7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a67f-98c0-49de-826e-4c34950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:23.000Z",
|
|
|
|
|
"description": "Automatically added (via d62ff3d0ee12d95ed2d63838ed121654141674d30fc8c681634cc0e506e4627c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f15d84358b743b25a8e60b1a4b1d84f9f0fe283f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a681-1a48-4817-97cd-4e30950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 42c4e0fcbf35d70121f82017b92c93d7597690011a9246edda4094755d38cf4a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8e0cd7a5170555e533a148e4730eb40160991244']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a682-aad0-413c-8c3a-4af9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 14edc6c728cf72cadfe2c6be335bd281719ee48af8876af47db2b63e28be80a3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4593faa0eeed3f5d629d4fbfdbc70a01fe8ca408']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a684-b4d4-46f5-92ec-4cdd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d35a3d980a1284fa2f894e69e23bc47e43046032493a2174a31b76c11fe5ea2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a9e092f839e4bb9f645655db3aa4eedd62113c84']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a686-96c4-485c-9aa6-4a9e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 905f3ea8aea0ed42a1d700051681ef39c7311d6e6b66f2d8b7c5bd651b295247)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '05c1827c42fc1b06817d377080d871ad5bfd2ebc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a688-9548-49e9-8e79-43b6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:32.000Z",
|
|
|
|
|
"description": "Automatically added (via e2eb3e8c5238ef530b0946ba5e4138ad0d501d600a018878549e0c5ecfa0225c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'db8078305b99728f000e232b190c467217b5ca61']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68a-4960-4aef-ba32-44ae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 73471b4962a9412736c7ea8a85b90d393522f7c54ae4d8352df3f9f779caeb93)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '244ce59f130cf656f2f1bbb715851a2bcc1105fd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68c-746c-47d6-9bb4-4a73950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 4a0852b334bd089cc3e06f2ec88133c03ed747e6206318ccd6ea58df17f1f45b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd6580c2295fc0dea42c414d09bdf3c0668bd8743']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a68e-f7f4-48e0-8b33-4fbf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 153f78aff7b18c3343fc49f2ddbff0e7d2e8d6272ccdeeb145661f1c55ed61c3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fd98f6c5e20b5c1567b83d3fc9d93c09a8a56465']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a690-cbdc-446d-8793-4588950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 9336b0c691b58ea0584304362087ef1a353c93bcb4781bec1acd0a10663f6bb1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ad76414f151807d6a0d05d12822bc9e08d1afbb7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a691-1e64-4e08-8920-43ce950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 4b81675796064c1c77f158b823238357c981d18a17d2b4da92ef03459ac8a89f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3a48c4263144b5cc95a153abbe9469231f240d2e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a693-6624-4e8f-965f-4300950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:43.000Z",
|
|
|
|
|
"description": "Automatically added (via 433d29ad9252a9ee4124db989ae4c7dc95d58611ff777e76bf47f1765318ed3b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '48d3a7a0be7999630716b068f7d64465d319ac81']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a695-e8a4-4209-964d-44fd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 19317455beed376a66a95a85b8e6c2420757aa6745a21e83dca364607e9f519f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f53ad70f2586a7f2066df728c390f94d29bf7e82']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a698-e268-485c-95ac-47c3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 966db22f18650163c50094e47025949dbb2c0250363351d66130bb0319999f8f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ab98c4e3a9ef9ba183ac4d85e9afc82513e67e23']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a699-2d20-4fbf-8924-40ec950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 93c2a208772480b64daa3b436142a3d0029219cc23f890584b2f430984f7fcb8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b42e93c1510c375afe1742df0f667a433ede2207']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69b-a3d8-4231-a64c-47e8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:51.000Z",
|
|
|
|
|
"description": "Automatically added (via c0c1454fbdc2ca819cb4f4d2516c22902430fb127d3a6c9d0b02f45d3b223ee5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '19400a7f451c4a9af29755c84c9ba1267a6e2571']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69e-4e84-4f9b-9a73-471b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 7e3cb5379ae7f066efb838e109ae6b0fd3b5d25c3e56ebf5ee964c5ef78f9f23)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7cbfcb23eb067f6dd978a9dbea6b9db234c6ae93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a69f-efc8-4bb8-b5bd-4d9a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f73ce3d78d3c0b14a63ad200dfa8bdd525b565e1075545b74f24b31c7be6ca2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3c58dc3816470851981089508e29bbab2cde63af']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a1-5b98-4f61-87fd-452a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 69a826fa53e2e1edb913d2a0a4d76a64a445bd59da74423596c3487a23ed2385)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '632ec5a6bb29ac6a12f26f571bf808c76a7bb5a4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a3-5a6c-4f3d-bee4-4585950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:34:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:34:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d6b30dcefb3203913ba69d2c2b57589f5dd9b564a5a54b1b184352766e17e67)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0d5c1a1ad22dd027729e02831f8bdad59688f0ac']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:34:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a5-cd60-4350-8c1b-4dba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 1e51349333f968f461f97544deb7098d6288bc6b835a12f0cd411955be641439)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '709006acd52767546dfdae15efc0aded90ae981d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a7-5b24-4b37-b0e6-41a3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 1761d77a9112e8fffca4b33268a78e12b647f312c951cafc040aac9f1a5bdb99)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b007119f40bdab005d3320cc8c89154e60b036f5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6a9-f854-414c-b369-4903950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:05.000Z",
|
|
|
|
|
"description": "Automatically added (via d801699fc530ac61165a206a50d7c34630fcb5f845142e5f6451a87ff218004c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0be37b3f2dd1da94ff11f6bb95136a4f9d41bb9e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ab-12e0-4dbb-bb08-4e94950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 79a6eba95e3bd532a721a306eb2acb71b56c9e45980e866d28e98a085ac528de)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd97538e54b2f0fe4f1bf600e8ba5ffa60bf24f91']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ad-574c-40e0-989c-48a5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:09.000Z",
|
|
|
|
|
"description": "Automatically added (via 97b88c52eab6df19d597db8c7f1e8e2b1c3b0eea8ed1b337520b9fad41fb3c1b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f9c5601bd347cb2e740c5f7b840383236e68e04a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6af-ad1c-4bc7-bdd0-4086950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:11.000Z",
|
|
|
|
|
"description": "Automatically added (via a38d0e4d2ab3bcf98f9a87672ec39b4010afcfe8971476ca1231872865a1df7d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c9c6aa99fd858e9394e98241cfc040ff070dbbea']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b1-3208-40f6-aa8a-478e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:13.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f90b54a17b15a2629adec66cfd5f3ff6fa2e654e32413782dfb1521beb52c2e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9fc14d7c550505c0ecd6848ab6c42e7924dccab1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b2-7534-492f-8428-4aee950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 080f255865dd4321fca02e5ce87683138618f9201fffe335eea4d05f1fc49beb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7ef72c1812879360cceda83b0844eb2379e52953']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b4-f63c-4fa2-b51e-4e6b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 1e92bdce4f60a43e5bb71410f63b56b893f48bb35ad4ca1a93545d8f32f2f4b0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fabb03ed700b96eaa3e82d43d599e002a0a6d144']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b6-fb48-4af2-b348-483f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 968effbd6373260ca0f8a45e2d5035517c8ec1fe380f3d1be1aa8423def86357)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fb9933278b47066b1c8b4105ed6983656dc7121e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6b8-e4c0-4f20-9383-4326950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:20.000Z",
|
|
|
|
|
"description": "Automatically added (via a201c5272fc141fb07b622b1d73977acc7d499a118ff5e90e55a50a44780b32d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd1e2575b582a8ecc704a0eadbec06e0ade85de5c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ba-1ac4-4fcb-ad83-4dd3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:22.000Z",
|
|
|
|
|
"description": "Automatically added (via 15a5a2b65c8acfeef7a9470b28f7104fecb323fd3418a7f88e5ca012a351d85e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b15ee751bda16e996bdd3e0b6c3ac15f9a09de87']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6bc-d81c-46db-8786-40b9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 787286d71ee50fad99563d324bc4c2b65921f579d13a874cf854922dd76d35ce)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '70aed5c4223c1f77740e7c1a6dcbd85863ed9e35']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6be-8ec8-4249-ab15-47cf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 4938bd2dd8f0462e4c28db2b864ea7f3c2d40b60a5c0f4f2b2a0fe6dde82abed)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '862cce4773838353b467dcfb7130183659528764']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c0-07d8-4c3b-8147-43e7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:28.000Z",
|
|
|
|
|
"description": "Automatically added (via d6a1e20a82f4a18626869d1b91e8fd192e1b444cec7020690fc5a3b0c79837de)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9780e4cbc8cacaf610fe8766ec95a808cdef8e8e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c1-e8f8-4739-9551-4da5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 6631f2a0478326ea27ee1ab0abbf82948c74012a78f4d894be7d3e34c8813eda)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '209a8afb6fb61dbea8a487609490be6ef77b3e93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c4-7644-42d5-9aec-4b4a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 218ccc259ae78f482191602c753ede43eed873a47406792e8d5504e527bfea38)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '77eb5036d0bd08a80e6a3ab2f9900d3b6a844d12']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c5-e470-4ce4-986c-472c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:33.000Z",
|
|
|
|
|
"description": "Automatically added (via b307864a52f8686a858690237b7162c98745f08b462edb924b0c60b2b5838320)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '98fc06c2d0bd46e7c4a73ab10fbf444d4642f912']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c7-d348-4a0c-b6b5-451f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:35.000Z",
|
|
|
|
|
"description": "Automatically added (via a5d5973e328b38d6def940c228d5b78803d1d7031ee4526ea2f7a0785cf3d70f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4788453b8ba1377646681d08f33b735d42a8cabe']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6c9-b6c4-460f-aec8-4ba2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 5c850750749954ac508dfeb756ddf071e304669fece52f6540d7d300ad10496f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ce4dffd6d1a5b8ecfd5ec4f4a59c648d0422e019']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6cb-3b5c-4d5b-8b69-441f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 652a05db1d96a5b9a7ab04b66526626ed173847319fd933af2170e04b4762cff)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e96639209c154485d6050e837a7b62b4f3d96819']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6cd-f5ec-4f5b-a9c8-4432950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 69f0f24f9bba7b01ebe984086417a5144db5401f8fb9b4381cf488e58439d6c8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '61d3ad856cdb88930e04680eb57506719096da74']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ce-9658-47b0-b7c5-40e3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 7655b8cf0033e8ec288f14aa1c6c45992fd4f47caaa440edb014427c6e70cb89)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3a28fc4cea111b95f81ab9d2c8f64b0c0fd0d844']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d0-81e0-448a-a75f-4f1e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 1ce775962f1d90032f7f9a297f0fb50dd482ab3317df487c3691c34f73f1a38d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fe0086402f13e78852182aecb3a4174645ef2349']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d2-cf44-4db5-8061-4a0c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 4d65da438bd006054e3e42dfdb4d5afdd962f346ca1694d2bf35cc901fbf221f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7a43bf0a937801ff93886813015732c7deedac4a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d4-0368-41da-99ac-4d11950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 1af6c2f07f25398cd280be3d58a477463b1c400a903ff871b58d382d1dbe1f94)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '729c88dc49acba1d03ab6ac4229cf17cfa586f40']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d6-c580-492e-9bfe-4497950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:50.000Z",
|
|
|
|
|
"description": "Automatically added (via 414c1a7481c69639686007a42cf3a519e9a184cac87176ded4ff2ae3dffb6dd3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd97f2ff009de4aadcec53795409a7c03dd539a48']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6d8-c2d0-4842-9d23-4772950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 24076aa26d86cb14330f8c540234ea2deac3825fe9c6f9b8579d22699be32853)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e9b25faac1a91e8901bf4fbb2de556e1fca9c24c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6da-e264-4fdb-8c40-455e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:54.000Z",
|
|
|
|
|
"description": "Automatically added (via ff0c148af67071d03cebc2bfcee27353cfae64ba13f2c3fde4f9cfdc8b4c8e98)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7a66ed942c5deb2325151b2c998dae7c8fc857bf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6dc-11d4-42da-8370-40f5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 6cd3bc09b37d712173ad422288ee720dc0a63366f18a95c36d43784a03a9ed43)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '58ec265717a944ec4e3975782d3170b7f5fdbce1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6dd-9e8c-4229-bcdb-4365950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 078531cf6e84c9f8f55e75f53c78fcd31f55078216f743c6421adfa98cf06479)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'abe3e437c12153dc119c1606af3aa86ac5792399']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6df-20cc-4aa8-b95c-4c24950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:35:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:35:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 4787a196474cb8ee59b2a1c7e3c2f0e4cea4461304c40bb6a4bac5debd46765f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '38d1611bf6d56d3dbb56d192017c531e0f6cc45f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:35:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e1-69d0-4833-ae61-4450950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 9ca492616ceea6a7b3f53196b950a2f84a7326e8fa91f70923a6ff407913c2b3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '07fc21824b1e7fd27c8527b6c1d2bab3435e0c3a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e3-ac90-4d6f-9e09-4e66950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 201acfe7b6b05e6f7c6a360b873007c2381100c11837722d7d92ada742cdd336)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '800cdc8dc302af894d06b9b5578b5038b56bc238']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e5-e870-46a9-9538-42d7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:05.000Z",
|
|
|
|
|
"description": "Automatically added (via cff55274562b4835549d69f20575c905ebc1825a5e354e07a60a1cdcb48984f4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'deb40c6a197d65803390fbef61407aa1cb281aaa']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e7-f9c8-40e8-a557-4b1f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 485ffde041120a00c13acef876774485fa746fe398debfea5e96020d33bd6271)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '81794ae7e7609ff89c3b88fe4e6d2b00e05da7cb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6e9-1ec0-4dd0-aa90-4c1c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:09.000Z",
|
|
|
|
|
"description": "Automatically added (via 489de3edd590b265b3e4504b5bd5018a7ad8a3f319a6313637787e5d8a58ffdb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2cc8d39802d826d495ce393773bf9ad49d09b015']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ea-9e50-43d6-911b-42fa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 5576b2ff7ffca9ebce21bacaaa3121bb7a9afcc1350b7cdb95a950b3c8e5035d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1eb0131a9b54d8f62d064927d7f05b15298ceb57']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ed-ce08-4907-9a53-481b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:13.000Z",
|
|
|
|
|
"description": "Automatically added (via bd2a5012b18fa551327dcdd7b2bb8dd765704b65bcbda9fa31306a71846ea1a4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '038fe740f40601c47fc05396514f7f55a759d774']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6ee-f920-4b64-9634-44f9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 1dc9cf00d615a7d231ada341190be36224bd7811a3e00ab9cada7efc6c206969)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ee1a1f7fba6e8f92ed3342e7e2366f470159d815']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f0-ffc0-435e-a68d-421f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 986ba0643f2e162ad99bc58bc03832f6d4f44bf4d4725f6cb2bc7fd7e19d57ed)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7ca83aad44f6e01afd6fb7ee248ccdc24f63a25c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f2-61d4-4f94-a281-4cd6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:18.000Z",
|
|
|
|
|
"description": "Automatically added (via c72ad1487ae2e24ff8c4f631c9f0bbd09825dcdc93e01450bae4db7cdd4c56b2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6ecc2110ff3c3fadab7a27a38068e69099f5aa71']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f4-adfc-4b09-a80e-45fd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 2bfa3f42d4762d48e986a25161a1187772edc4f712966b3a19a4652463496959)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b592673a12897b719bb78fae881dfe23f8c63a48']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f6-d0d4-46c2-aa95-4ac1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:22.000Z",
|
|
|
|
|
"description": "Automatically added (via 341b82597f32814afa2b2538100945923172a802b3462af0b8e343dde80195ba)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c8bdf1499046638fb44331829d34cd98e4ce9650']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6f8-6b4c-4f40-a761-4d2a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 8c111551a53ca7d59bc5293653d0197fb9fd99b452a13518464cde1aca979507)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9e22f4e194543717762ee7648d04361cc22f025a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6fa-ad30-4b02-a920-43ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 270be8a8eaebe9e4d61274b118372e595adb615eb36f55f851dfa266f53c0991)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '581b9bdecb7f41b910f5fc48d4f8dcf1c0828d7b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6fc-3818-474f-a02e-486b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c9d432acc9c396f54dd4f580ecfa607e636eb2212d7825f846d8b2054b5011c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5d0d12645e42601f4ba31d39cc5b36ecd2691347']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a6fe-0214-4186-812d-4f34950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 43e9fed3fc3553c0ce1858a19af5e452b01bd7bf11354dfaf6845fd86f5917c5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5b7e3fc56e619bde7a5abd1c497c168b3ceed5f6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a700-00d0-4964-936e-4ad3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:32.000Z",
|
|
|
|
|
"description": "Automatically added (via a881b05dd9c3155d97b75789a810b11f8fca745a1eca819ab336934367266fbb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ee2ad749d3b354a7d8c67d78b90d7eec11d303e7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a702-a21c-4ac0-9e3f-4dca950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 5ca353453bdcfbe897b5bd1660698528f514da3875e87944f16f3aaf3446f7b0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1bf669a8843bb708771cad64c3851a5b67226695']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a705-5814-437d-865a-4fc5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:37.000Z",
|
|
|
|
|
"description": "Automatically added (via e5f76f4c4b2e6ac365c681cd37530d14deb0f8d4767655f4f975806367ea6f13)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '846355ac61dd8c036fa1eae17887697fdfde58ba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a706-c62c-42a1-bdd3-4573950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 51a9825767d2e2894fb9604d31da32e1f9b2c8a0424bcac2bc40a21a93ec3321)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9b2ff7fb429e6048e555f48e0510d9f7860ee302']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a708-4d2c-4fae-9880-4698950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:40.000Z",
|
|
|
|
|
"description": "Automatically added (via f9bb28dbe6d311f81e656791abdd8f1651f007d3ea21bdbe7f0f77b80c74e46b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f4ae52ee19d5753d5607b8da8ab3855d8c6791a8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70a-ba9c-48e6-90ca-4cf9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d889a8b0d20632a7bc9b2118a13759cf0b63858fd15400ad5e84ae752fc9439)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '06a55a5ea34cbc7bc677d9a7f24e0982a7118a42']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70c-c140-4292-ad32-4d9f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:44.000Z",
|
|
|
|
|
"description": "Automatically added (via c70aebf342a2fcc2be318d1942581fc9b197e8912ac174857d42bef6a2723a1a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '71063f8e35cc131737be88ffb1d2d35df71a5ff5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a70e-861c-40b4-8236-45d7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 6dc6a0d71ca831f50b3f50ff06391348943b460721640fde31725a4d3d45fc29)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c90a3079c64c02f438a53a826e2d3072536d5821']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a710-bf18-4eac-a459-466e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 1b789b375fdfe6da9c74013ae8aebc3dab2bcd7f014ed14437e7c9aa78f86946)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6112a5fe99f36172a04aafaf3aa0b9be7e54d462']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a712-85b8-4922-8ee7-4d9a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:50.000Z",
|
|
|
|
|
"description": "Automatically added (via f727325dfe8c8132ad2b71c42c7dad6b62bb54292631b6812bf82288ccb1e223)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0d79df5ee4cf502bb87b1705ed7d4019bd6a9108']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a714-67bc-4bdd-8318-4b62950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 431fda6151e73be42660aa087d8d255eaf17dac26072a2762d4cd94211d8e327)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '88ba5811080173cf86904ba8cdeecb11780b53ec']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a716-b47c-4d35-aef0-49f5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:54.000Z",
|
|
|
|
|
"description": "Automatically added (via ab7cfb57e8a713aaf4bf69dbcaefc1519c573f4844fb6d049bce938dc6910d65)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0b0ed5cc19af027952c053bf2084e9fb991880e5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a717-20ec-4990-942c-44cc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 918788687c1586d6549b207a2556ca519a52a0ad7af4c9a48314eceb044b6391)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4a076e5a26ed3789e9d44100a5075abc3e60e3f8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a719-a114-4edf-a682-42ba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 5ea9872dcdb18200e0ec73c54b1720f4868a4d349ee38316cd58b5cc2285c04c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2757b98db31e0676cd6e93a6877763de64826fa1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71b-82d0-4160-9608-455b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:36:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:36:59.000Z",
|
|
|
|
|
"description": "Automatically added (via c6a0a0336c1b7feaed29e1544a6b679b27f7e5f25de05c5793f6fb822e1f3029)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7572e185d07e9653cd977340db861fe4cd9310c3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:36:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71d-7b50-49de-ba8f-42ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 879aeefb89b793a6412fa2a03359d03fe0c63d38658cf7e8d405cce1aab82338)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'aa6ed43149d89de822ff2dc5860f44351e51761a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a71f-3828-49ea-b545-4b8e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 334ce8473ffc5bd8d6ba57f05526319cc3afb9035d5077678f175ab2e1401921)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '50baae783298e6f909433ca7e25eafae1238b199']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a721-d0a4-46d5-a817-43c2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:05.000Z",
|
|
|
|
|
"description": "Automatically added (via 24af678eb0e604fe98c3b107ff584690804478a15280ca6869a0bc5628560518)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '96939c365a3ddfbeaf8acfaa268802a109932bc3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a723-8408-4ad9-af27-4b51950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:07.000Z",
|
|
|
|
|
"description": "Automatically added (via b6a891a747201c388dc51154ad7afd9222e9059bdce4dc300d1f228942bb0053)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9a374829cd01400ab934a94c603ca1dff107f214']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a725-9cfc-43e0-955a-4396950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:09.000Z",
|
|
|
|
|
"description": "Automatically added (via 5538209cbf28c038701986059c6c4927ff5ad524bd58b8dc1dc474c42955fa9b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1f7373cf53bee01c41c28e16ea06393ed4e61561']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a727-1b68-49c8-9cc6-4f09950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:11.000Z",
|
|
|
|
|
"description": "Automatically added (via d178309a94fb42ab3d0508f67ff92aa2c3c63c7eff97131db2590bd6d5a8a70b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7f90e7c65a557d4660d19cf6d34903fa25132163']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a729-24e8-49fe-948c-42fa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:13.000Z",
|
|
|
|
|
"description": "Automatically added (via 9b557ec889152f554ea407db214a1a4314c68d7395a2d945e16f56dbd045185c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b67099961f9e0fbefffd7ccfae292cbd88585967']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72a-d8ec-4da4-93d4-462f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 97200ade9329be5d85bbbeec5e58b3ff79aacdaf145d0a961f8c751be9fb846f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7cf8ad134d9b7d919b367c051f7908635845a41c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72c-5160-454a-9886-4eba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 3619ff07258fd788ca6cc7afdd677e7f91d6ac1b752af34ce80f6e0a9ae31a35)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b607ce4b31ed31dc1353e895107456e30dc544b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a72e-2344-42ce-aec6-4adb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 92eb8d4d5864d52da34b6ce0652eb123c6740e2635720bafaedb0d978bb29358)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fff0042a09190e02b105886ee475856143199f99']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a730-0280-40bc-a87e-487c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:20.000Z",
|
|
|
|
|
"description": "Automatically added (via ae014a74e6d8ee21b64d595101ab5a83b0d5af7dcdedd26d15254ef2a4ed2559)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a7be56bef58e52295aedf78d380033f9ef3dfcf6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a733-04e4-4ab5-8d83-4a97950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:23.000Z",
|
|
|
|
|
"description": "Automatically added (via c226118deeedd237fef3801af689dbdae4c196ae7879f5138a322780462004be)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '96df673b6ad8eeee53e29f40fee2a2a7770d3c07']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a734-03cc-4dfa-a387-4bb9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 2e21f9d98980fa3ffc04a0698cb3d666d586491b37bcd5ffbb41048549619e83)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '389adffe36b2bc1b87e2b81f98812172b3516a88']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a736-7e70-4e0b-b077-46f8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:26.000Z",
|
|
|
|
|
"description": "Automatically added (via a6b1055fae0ba588cfb1f6934d704baa522ed21e05dd5191d5a761a11457ebd7)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7ba36bcef6616c0d80aa0ac1bcbed4aab6901e39']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a738-52f0-4382-95c5-4ec9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 6d8220803d0125baa8f6a8c513f2a467492c4cef6bac87441bdd09c4841e5e74)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'eb14b9df0a3da0d68a4890828617761f9cbd3cac']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73a-a064-42c2-a632-4570950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:30.000Z",
|
|
|
|
|
"description": "Automatically added (via fa357f4d21eb53ec92873c3c3acce687b66c526ef7eea35dc053c039a600e48e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a313cabb0f7617ff8d74b3a5e39a38cc1fcd5c6e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73c-83c8-454a-8abc-4529950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 087836e753b3e29a798f52476c36ee99e3a53f691226cd81fc45a86e80d8f8e2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '69961733848a7ffee151632c59091dfad146ae56']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a73e-0628-40d8-a7f2-4ac4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 7a9c62afa8c71277752a3ec4e8a6e9dca38c8e6a8392601c44eed65a432bc4b6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '46753ab7db1090a81c21114f9be3b518fda50c25']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a740-f3c4-4fa9-bd91-494a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 59ad264a6b38f7b12deffff609c217ce1830a5269b119c8ce2ff96087b3b11b0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8ae1e702da4c0b1087a5e1d95a741afe60947874']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a742-9898-4d69-8e8e-446d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 850f7653b9864ea446a46039a3201c23da09e48e99d8eaa0f8fdac04b61576d5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '318371a3a14b624c7436025e330e78961dacaddb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a744-739c-4bc4-8c87-44bb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 436460681e88b3aedd2bed3d40f6d1299d0f9270a935f0bb230fafa48b73f221)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '30f4068e478f6544ef9b8ec0d94dce5d97e466b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a746-faa4-4f4a-b9b0-4d98950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:42.000Z",
|
|
|
|
|
"description": "Automatically added (via be3f03a0598ff967642a4ad1cbb622b18fad1ce03361d0f00c37a53950e33c5d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e33af2c784560829d8ce77432f385a5e2ab8460e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a748-3d14-42f7-90bd-4804950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 664933e1ad1b406fcda058a5d1a148aac1b8ffc4c515a06913204876b5032207)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '722642315a5297bce585a0a9209a861e050237ed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a749-6b24-4d8f-b44b-4793950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:45.000Z",
|
|
|
|
|
"description": "Automatically added (via de915c7d8e640f2e501084e42d38cb5706a9b2fc8e0f5d9680844bf61e6a2112)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e73e58dfa795ba0e7e272b8df326c1346f4a8e93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a74c-a814-48b6-ab49-450b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:48.000Z",
|
|
|
|
|
"description": "Automatically added (via dc37f3d97778dfcd6e787fd1f181dcad01e843afb646ba8689adf9dae9902aec)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '96cd275f5a6b8a80b06ed334bbe6cb4a6f646754']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a74d-626c-4871-87fa-4253950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 085484195db75cf77e2fd8b15f048f869ecc4da172ffe7f742494ec0cc5c728c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '07ea4edae7a3d0b718b2181518b7567e2894c3d9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a750-24f0-4e58-9311-419d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 8d8776e392a8c99b7049a94e8f937424392d3069199bc60f114aba7f8d0f1d8a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7d644cf5186fad32d6cf491fa9e45a46560d64da']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a751-e0e4-463a-a47d-49e6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:53.000Z",
|
|
|
|
|
"description": "Automatically added (via 4292cbefd9a7289f7438114dc98a115c106fe0108781ed4918c37a55f2fb5e5f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7567a2d0f96bd30c10b1a0d4f12dc2b64b378889']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a753-2408-4c7a-878e-43e7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:55.000Z",
|
|
|
|
|
"description": "Automatically added (via d223438441cba166c5cf2f1b3dd4cab08a807d37d15e9363137396112265bd61)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c978bbf478900f28ae045ae5d635480bffac3d18']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a755-08a8-47e3-8536-42e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:57.000Z",
|
|
|
|
|
"description": "Automatically added (via e025fd396ba56af87e4c13b06bb603916c85c2a1cecae0fb0dbe7d5a000c7dce)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7d6ebca4bb7f991f7fa3e9d909921683f26cbec0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a757-f060-46d9-9659-4e5b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:37:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:37:59.000Z",
|
|
|
|
|
"description": "Automatically added (via ec083b0c965bc97d2d87ef713a0d9e741203cd02cd1cbba28b5932aaa2411b75)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd3c84da637936084dafc86b9cc4c9a36cc77f261']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:37:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a759-b3a8-4087-a5af-4cc3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 644ee3318813aa46b1a0b7d16bddcfeab54351eb2f855fa147dbdc2f6bc26660)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd0b58102d39cde4cc91c25e1a6ac8b24e99aa3a9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75b-121c-423d-b3a3-47bc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:03.000Z",
|
|
|
|
|
"description": "Automatically added (via d5c972342a185e81a19becd9ddea2b7330ae9300187333ed10c7c6a86be81375)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ec5c2b6d034e5d89371864974cb68e9fe5a7d943']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75d-b448-4da0-b6e3-4783950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:05.000Z",
|
|
|
|
|
"description": "Automatically added (via 3c5a2f843f24501925dac2e155b53fcc0390da898f846be81695a48ad7e466dd)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fd3e5159d0e91a1a97e5e00a5e0815613c3fac23']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a75f-97d4-44a1-8a71-4b13950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:07.000Z",
|
|
|
|
|
"description": "Automatically added (via ea038dc5d03d4e5cefa9e73b4ec5424b681c7d43c0176c61d97c58ea4ebcfda0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3b5e03386cd34e512c1e725d69a1a32a329fdae1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a760-7a68-4527-b2b6-4156950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:08.000Z",
|
|
|
|
|
"description": "Automatically added (via ce27fd54305fefd606a73c8ccf85f29fbd977a40ca164b51f754384b5457a1f8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2cac923a1b6c26882e677af12b5545658ffd4be3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a762-4d18-43e4-b41a-4c87950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:10.000Z",
|
|
|
|
|
"description": "Automatically added (via d8ceec2cdfd50b4ce031b78fb691b71c084bc9be016452e75631b857bcb55dfc)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '782d08e1a311eb5aa3a98a4de9a7ccd25ecbc3f4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a764-4f70-46be-89d9-4c51950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 7372c6b86589ff6756e0889860d9155122dc3b86f9a3be58e8adc7eaa7db6c93)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '887d1614431eafdc4c4c4f9e3e3699a6c980c9a6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a767-5d04-4150-83e1-4939950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 46c060d467675f9cc7daab832a2165ea626d1ea7abfbbf568da70c87a1ac7755)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c8e814a019d66409e1d56cb9d057633a594af48c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a769-8984-474e-b6de-44b5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:17.000Z",
|
|
|
|
|
"description": "Automatically added (via b9954fdda438e064d41c67d2c38634fe7301050534522fc454c445941f851af4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd7d29f341f8b13c2590af5f7ebc4c34a53f6ab8e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76b-2950-4d82-86f3-421e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 815632c2cdb0b8434ce4c3579d0869eaaf21d203e0c01a6cb161e946bfbb3abd)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'cb0d0434f61fdc02f97981a68cedbf520f7e7103']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76d-2904-4de1-ab57-41f3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:21.000Z",
|
|
|
|
|
"description": "Automatically added (via caeeb5604abcf212e0c614e9aa1f2e428ab77b09916609f6fc3d6368dbf172b2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0af983f5d7e42251f629a31d732cad85060dc2f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a76f-d28c-467a-9921-43a1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:23.000Z",
|
|
|
|
|
"description": "Automatically added (via e4a9567cf41b8ab99099cc9288173271b6d46ea4049345bf8741ea2c31c1e449)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c4f0ba9b9ead1139b896537c45e874cde83bb4b6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a771-d528-4c51-8ee8-404a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 345f8c5e95818db45377ba4ce3aa8115d297c2fa4e5ea50b688a66130862c481)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3f5bfa4cb07767441c2cc7f956e11f309d737ca0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a774-bbd4-45e1-8b5e-41e3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:28.000Z",
|
|
|
|
|
"description": "Automatically added (via d79eb7c62ea8947525f55d81187f1eb5be7dba3088eb6e5a8fb7bee23dcc9640)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '45b3f1f4facc30bd9e9a955998b8e5445568d8ce']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a776-6788-422d-afa4-45e1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:30.000Z",
|
|
|
|
|
"description": "Automatically added (via d76d5ecc9f11bc663932e31a9525306a328073ccccd547b61ee570ecfec7c176)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '08e0c3ec68f9c75eebb686322c65641239ca9ac7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a778-29f8-44d5-bd2c-4b6f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:32.000Z",
|
|
|
|
|
"description": "Automatically added (via ce22ab2602eafdbbb5deae26e42308d85531daf19bad13f494552e3b44f16158)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e341655e03598ba5b0ae91e71dd5988d96ebe438']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77b-2eec-4888-90af-4cdd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:35.000Z",
|
|
|
|
|
"description": "Automatically added (via c14e8c94245f23b880dbec5322546248a09a06e4dae5d10acf02b27081586bfb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2809a09bab5868102d7c610f3e05e4eaaa0a8ce4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77d-e868-47af-8233-4dde950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 02b451de4696ff472a87e6c2e85d18110c8c6a1dbe74e138ca41c465b4131e23)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c13069db5c7da6ce7217f8440535b93cb05fa982']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a77f-4c48-430b-9590-45f3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 579826fed3c3807f42985072a5665edf6f9eb0649366d64faedde283dcf13adf)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6a186434322fd7b3010b57bd088d549cbba8a59f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a781-b01c-463b-b7f4-40d0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 85b61b8f8aee1cf63f8cfd5155c42041589609f517878c871f5fd6c610c136e0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ce41e5a6fef50884118b0377cea7360acf54406a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a783-a92c-4fd4-bcde-4f24950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:43.000Z",
|
|
|
|
|
"description": "Automatically added (via f6409eeb12e6b1171fc99cbb9ac4c4cd668bf42d2b3d426965f6ca1d2b01959f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5c3112180ff1402e487cf60e0764002c4fb4985a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a785-bb34-4242-a737-439b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:45.000Z",
|
|
|
|
|
"description": "Automatically added (via cb5cde5bf1637cc81aaab6629c06bc029ad128ad9125b9f3fb8b92361ee4404d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'eb0446f8c7063f86e12719e6eec34bbe0779f881']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a787-64f0-405f-aa89-4cc7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:47.000Z",
|
|
|
|
|
"description": "Automatically added (via a21feaad209c39e0c6a069b0cde4e027de5c041b6363228584bf6ab64d2e4ad3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0e6ec7f1c3f57d85f6779e434e74b203a8b66295']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a789-aa30-405e-b761-4b87950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 10dd16fe432b6f7aef6d917017264918eb92dc2d6ee71e6a73a8af203b0a83d8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7761364c8642a06f19b9352c7f287099601afeb6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a78b-46f0-433b-b3ae-4319950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 151eb1a5da6f004175cfbf9d4bf171ee01fa364d07c530e824441afab248ddfd)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a59f01058a4c305682d71e0702bb4e0768be7d2b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a78e-182c-4265-89c1-47b0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 16bc5785ae22552a16ad8337bcfbca661eddc4460084ea7f83c9e90ecde373ce)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4c348dffb5e7c6e29583c2e6ea5aa14c910188dd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a790-4e3c-4886-bba7-4896950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:56.000Z",
|
|
|
|
|
"description": "Automatically added (via 10f11fef194530bd8aaacbe60664a21a6e227d2cd3eea940a4a85049adc1a6d4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '71c219a5537d37f58457856570d460171edd4d3f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a792-5bdc-444c-9c06-4f4a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:38:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:38:58.000Z",
|
|
|
|
|
"description": "Automatically added (via 61c3d9a4e77e01650126d515895ba8b81d8347ed6077493a920bd19a7d50e926)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '011eb573ebc6bdb9861bf84bf2800049554feced']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:38:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a794-f174-40b2-a283-4481950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:00.000Z",
|
|
|
|
|
"description": "Automatically added (via dd5041e09b0d3eea9e9e25dd2a0b102524bfb858f650a5f2bc6e71fa5937dfb0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6531760bde7fb03a17347bcbbd938d2a2562c825']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a796-1228-4175-bf87-43ab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 9ce17df875f59ef1a872e43575210990032a6df9ab35b6775b9fb626d502e15b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b7f95d4989fda41bc3f9c350530dbe0948fb76d7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a798-7d34-473c-a32c-4792950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:04.000Z",
|
|
|
|
|
"description": "Automatically added (via d1c948c139cfefc03df11f9bf2bd16146b6d58169b1b1d7b234b2c4a13ed3f86)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '80c7ad860147295a56e86216b54c23e02d161d0a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79a-fd64-437f-9ae1-43fb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:06.000Z",
|
|
|
|
|
"description": "Automatically added (via a574fdb8afd4a58fc27eb11e8d04e4f1455fa32d50a4b2761f990655365264f2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5c5981b4ab06b4dec71735fd8d57afb17f4e8da0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79b-d5a8-45a9-a282-4de0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 72f29a2af1a62863fd57fc09873d1b0837469e4d0be962da432895b415c8c73b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '15e0d6aa6c8adb5d737009dda5ce31e469c07cf9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79e-0410-48dc-9e73-4737950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 8f44aed5853fd488406e04353e243fc057b6a625177eb6e635452cba5ef70ed6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1a3a7329c444b6075778bb94265e1ffb791f3b76']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a79f-3a98-4cd6-9db8-4334950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:11.000Z",
|
|
|
|
|
"description": "Automatically added (via b1d6774b0d5f88ceb924be6f4fc91999bea4fed8fa5195f902a484f60764632e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '29ace2c9e2e974f23567674429ca24ab9ef1b507']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a1-4ec0-4134-801c-4e8f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:13.000Z",
|
|
|
|
|
"description": "Automatically added (via e43c76d73d6529d458e4c31dcbafa0d86a8a1345541919aae99ad7597227933d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '14cd93fce3384ae29b9d8822912f5e9d9c101e05']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a3-f80c-48c3-80f8-4740950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 176bfc4538b7f8954ceb71c9672a3c2e95195960e45bff9d492ad5ca04fe859a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '84be85839aed7572ebbff24bbe90cacb1933289e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a5-2e78-4cf6-ab21-42e1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:17.000Z",
|
|
|
|
|
"description": "Automatically added (via d32107885642843505efe42d213996ae4bb0fbbd8d82484bb8fb329f627b75db)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f197a3d9d677e15c426a1b278ec778a7513948b2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a7-da9c-4203-bbb9-42dc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 7993a8c8ad57ccaf98d060bbc4ba51fd4c9459f5b9c126570aacb4517dfbef35)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4d9a8559948fb58ec55b32ec36a1ad95c23946fb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7a9-3410-4422-9f21-4707950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 50f635c018b46224f395a691baadf9c18e1dd31af0927fe5aa95c4dbdb149f4d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '58bc546453e96671a276efc82cf163556a2702ee']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ab-0bec-4282-ad3b-4f3a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 2bff7b36d402c5a8951244dfe527a6b90431c051dc0771ad0e60243c011959f8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'dfd6f553ff42113678cac0484beef1f756effc5f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ad-9e70-4671-b46f-47e3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:25.000Z",
|
|
|
|
|
"description": "Automatically added (via dba6edef542290e276be055bc737a49905eb7283f818c852917ab1883c938eb5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3756f75d51c20596d14fa8d2dae6a3b31c1400a6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7af-fa78-4779-8565-4e9d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:27.000Z",
|
|
|
|
|
"description": "Automatically added (via c5ed8f4d07604827d7eff84aefc96c6cc4c138a8b535db63b9f4519b2a570d78)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'acf1bdaba68ee30210b5068960c0daa5fcb8eb88']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b1-8498-4b9d-ad09-4d3f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:29.000Z",
|
|
|
|
|
"description": "Automatically added (via eaabe75a6e62a4663d17c38dad014cfa2370429112754d0c4e8ff9136b61eb67)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'cf12b7e6e47454453e5b8a828bcb23841b3efe5f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b3-d958-45b2-b7cc-452b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:31.000Z",
|
|
|
|
|
"description": "Automatically added (via b981078d713a694962f3fdec0dd570a74950d3ec1c1a2925ba98dbe6bc87af22)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7fbd23a57e2fdb94b1639cc73ae0760d0c76e03a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b5-d128-499d-9b9a-4b1b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 4f5bbde33a425bfd7e48eb5a74877c104eb2d9887770046e4fa083b44f7017b4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '262464bf007a73608298c1aa3593759ad26736ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b6-3c68-4562-b3bd-428d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c07c853edbc2b7dcc34d2a20bbfb12ef46c67e2424b8733a100b8aa2672dca8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6225f2bb67e989190e387166d4d710c22bd816e4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7b8-1d94-43bc-b8d6-484e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:36.000Z",
|
|
|
|
|
"description": "Automatically added (via f6b287ad5cb26e44527c1337ce1c61f3d175b8862ebbca5e65948964306708cd)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a5e0fe455d011c73904f253b0879bb70e077a4ef']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ba-c0b0-4e9c-bf9e-43dc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 95a4efef00d50dcb48df51b94750567914e9aebb93f91b22152f40041beb65da)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f3e4ef378d97d3ae54c030505cf4fe03ea46e2a1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7bc-1d38-4d75-836e-47d6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 19afc6355e3be42a38c133de279a9ee2739b22f0f022d68f9b60514a90155e99)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0dfaf62ddf361440ff0f5e36d9b7d4e3bc7fbc13']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7be-6998-43d6-903c-4a1c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:42.000Z",
|
|
|
|
|
"description": "Automatically added (via c097290074588cc7fd1e8a103beb052faf38c6f7a2c616c2a4505b1b5695ff65)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8d3cfe28dfa96dc383691b7a296ce43560fcc03a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c0-0b44-484c-80a5-4d6b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 568e5fd55ce5b3c00e81c4e580da7fb85799cbfd214737e9d831650f309b7f5a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '80e890f2f08c3ccd6fa0fa1de7c632e8ed679f31']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c2-f258-48a2-90d5-42ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 44996598c59fe3b9ff3b5cbe4a6777cc02785a60c52f203c7d3e063f77eb259d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '083d3daf48e94ed4a4e14c3fced04d9cdfe430cd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c5-1470-4589-8506-4d88950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 2c7ccdeb5897e3b67ef42fb51c2a60f52a6bd6ced753a82cd0b7073b75b71959)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7f9f848ae2931cd4a207a8988c08b73312f4623e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c6-29a8-4937-b460-4b2d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:50.000Z",
|
|
|
|
|
"description": "Automatically added (via a3af90d162e1d51cb5c878fad0ae085c1d504ef4f662fce506600209a4e30a06)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3ffeebd82caa2a14940f8f7f1767673e46aa56bb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7c8-ab20-447c-8de3-4de6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:52.000Z",
|
|
|
|
|
"description": "Automatically added (via c34469e9cf98f82f58c8f6df110a4312b6426651046e038b98a477c5bb41dce6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '13e3ce9c0698ca77a21583075ea92af3dec4ae64']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ca-272c-46e8-bfaf-48ef950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 105afb14864da6ebb23d21f3bb1a5b2a516e38f7d57d5756e317e5b10028943b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9b7119d01589f8a53e565c8b421ccc021523d141']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7cc-1194-456b-89a9-450d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:56.000Z",
|
|
|
|
|
"description": "Automatically added (via fd137fe199b9a942c82c0200241d22ca94990aaa6b0f47492a1f5e494ef58c3b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '459729a4fce03c2ecb5e3bdd6d6dd8d26c1edc0a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ce-bbd0-4c12-b2d1-4db9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:39:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:39:58.000Z",
|
|
|
|
|
"description": "Automatically added (via f72ac76104154b86e85b1afa837e94510335851780080743fe611e07b6ff79c6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '9b6014930bd20de7d12cf6c0a567b232e0523ab6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:39:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d0-7128-410d-8c60-498a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 3fb872e1241a82d6bc0e91a4ef439760aff88e7cd0d4e07e711b8ce5ce6bd75f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a7154e28ef8a97254381a040c384bd0846d025a8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d2-d948-41e0-beab-4241950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 05e83fca5cd522ceb94133e8c27c991db4e4a272e995e83f0f9c045ef8deb38b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fcdd768f4d93580df9e8f93ffdd8e930f7c26d1f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d4-752c-40f5-b444-48e6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:04.000Z",
|
|
|
|
|
"description": "Automatically added (via 951851d14a03da1106d010d7b957732dd25793d8ac2c3f3acc14f04b067d9523)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3697f8cafc1c8ff12b81a4b35911afdfa8302706']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d6-36d4-452f-bae1-44a4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:06.000Z",
|
|
|
|
|
"description": "Automatically added (via eb6a88bbbe752253aece743442fcbee7cb205a15780065279deac0484ea4107d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '21158a21d488cd7eee9283c6d523854fe6c3492f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7d8-b5b8-4352-9439-4e53950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:08.000Z",
|
|
|
|
|
"description": "Automatically added (via c76a695d86d2cc9ee76d2d4bc84f1d5a17101158357e73a48f3f1bc8f4facda1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'dad65b57965f3adeeb8300923c7aa0e442a24103']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7da-8d3c-44f6-b415-403e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:10.000Z",
|
|
|
|
|
"description": "Automatically added (via d704090175212056558c4f274a4a27acd6b23aec8ba98349ff27eb53477f4b0b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3e5c927419f13b1df06568fac89c862b846c0521']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7dc-b69c-4479-9f01-4b73950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 7e462b671a8d05eb38a5e66c5e8ad43c2bd1ab5588c04c56a2326f69c79440b4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5551e94f39cd8a1b02bb5e5c145ddfdf172f1483']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7dd-7150-4768-80c9-4c0b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:13.000Z",
|
|
|
|
|
"description": "Automatically added (via f81c6d59bfecae0b39bfb7cb1f30f686ad8b6b72cffe09407f06023200478758)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '47e0c5b4c588fba2361482987612db7b5bfa1f52']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7df-c064-4bca-a4b4-4525950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 1fd1ecb8b7c38b21bcafdd41fc599e0707ca972d0df33f76e32fb5c0e122d875)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '319b71619892751f9c65e1fcabcf0de7c03c6ad9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e1-ca24-492a-b4e7-4b38950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 196268250b88ea6a1f42d45b968257c6bf8351a837427e81e657bfb8384bdab3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e75e9b059c6e5ecae3596d9be2314559c5b183eb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e4-5b70-459a-b770-49b0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 321325d931ef803d5a871ed35a6bd4fdc894afaf73fe1519db38716b04be6195)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c1ed0517a96e57cd0320f86b715c925a47172cf4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e5-a4b4-4dd6-b80e-4cfa950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:21.000Z",
|
|
|
|
|
"description": "Automatically added (via a7ba19f08d8badc8c212a5b1535c5691d83442b51fdd0431dd5ad30fbb107bb6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '918e3109e5fea4bfb5f248ad6b67d47af4536997']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e7-54ec-40d0-86c6-47b6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 03048369e3853dacc6871b81fd2769f36be1ca282c11cca2ffae5ecb0e41d4f1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '64ba01cef838e23173b63a3479aa924632f5ca6f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7e9-5c44-4d7e-a801-4b34950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 647877d4605f0bf20fb15c7dc19b80579003c8cb44f2a7c88b3fe3ccd686cb8e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '476cc0f1e4b721e34e00aa420359c5a9231938dc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7eb-dc50-44f5-894b-4cb6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:27.000Z",
|
|
|
|
|
"description": "Automatically added (via 226b73231ac077ee0465786f95266f61c2fca5c8919e6a84bd626c0d6d42705a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e7fd83964c5398d506b24fc53c8569ac5d1e2e1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ed-4644-4277-872e-40e2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 812b0a04dae91df7208bb9ce6d3edfbc6fa925a07db89a319e13dabcc40935a3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '70783b74d87aeb7a1f6cf6fddcf1ae2b4395dbd7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ef-e104-4839-92e5-4d34950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 2b257bae1108d54f6d97d8332dd9c57bc71b4eb42fb9bd6755b1156339aaba18)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3f61a3ed0e149dd70f67e8cf4064a71d846a7dcd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f1-d370-4190-aa23-4e58950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 4fe5247caf0f041aa7684b1eb771c264b1e3b627e5c5d06178e9199cba5843d6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c961e861fadbe9648f0beb4e2a75cc5fcfb308c5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f3-f2b8-4d33-884e-4f40950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 7cb91088002641b54684a582654d9bb1d34fbcaa6c1d379dfadd8f88e9297e19)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '79a98399ec8689ce2c0d4d6566d6c57f21e84c4d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f5-9218-4f4b-9a6c-434b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 490c494600e98e8e276520b0f8407b40695e4589a9df33cda154856f448b2a17)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '86aafe960e80fc304a9263ab6e80fbee6c1ce479']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f7-8ec4-4478-b3cd-49f6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 09113e85de49dacd9d65c1150df7039fb053ee7a6ee6e37a1b24535083cd5284)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1aae50c26ac02868486b1a8313310e45847e3b83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7f9-d79c-4acd-902a-437d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 78777a42f9d59926fe2805c03465852e88cdf70ec7dcc99466bcdecb1033f78e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e603d9f401bde85368e3510e93c95aa37db4c44b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7fb-a26c-4e26-833f-4aed950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:43.000Z",
|
|
|
|
|
"description": "Automatically added (via d774ee440c71d33604d56e384b737b8f3983d702188c23e034ad9bf947cc46c2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a322a68dc07739ce6b30dac6d625fb646f306778']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7fd-ae90-4553-b5cf-4588950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 7f87ef80c26699d89b6d71412c8b8389080a654f56a6c58edee95869a3513b55)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b6859b53efbddc97f2adc50c372592320e55e7ae']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a7ff-a488-46f7-b173-4346950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 16be093da0780e5869c6a60450408c6827f6f733cb94b56dc3f79263fb8f9a83)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '989e2347b13cfa13b256c2379dd9e96bd1e8f485']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a800-6538-4fc9-ad18-4f11950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:48.000Z",
|
|
|
|
|
"description": "Automatically added (via aea95365a40b0bfe047907e34f6bfed7444c27e4a897da6fe390358f5941da3b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b6569e09a5fc8b77f25dc22765169ba6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a802-56c4-493c-aa5c-49de950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:50.000Z",
|
|
|
|
|
"description": "Automatically added (via f7581a28c90208487380fb7ba5bb931d6cf4d2187ede73986afff9824ceeb27c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6229eeaa2733b63f5ffb51e85f935940']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a804-c3a4-4456-973b-4e1b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:52.000Z",
|
|
|
|
|
"description": "Automatically added (via a93f9720f198776e4ae04ef599acb713fd8d95c4f1539b843942007000367d87)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b6ec9220922e399a098c85f7e517634c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a807-a344-4d9f-9afb-4050950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:55.000Z",
|
|
|
|
|
"description": "Automatically added (via 67171f3b6d4a281aa11b34320296186ec2f37f2a07e1bded06763a8893b855eb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8b18a9f60230308b64502e7930606e7a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80a-1b58-4ed1-a93d-4c41950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:58.000Z",
|
|
|
|
|
"description": "Automatically added (via 9da61001549cb6cecf95fe6bce17a3b2b3b8b3639139274f0d64adb6fb2f44e3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '02dd21c2cb423d29aac4b6649fd75328']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80c-a538-4e92-a0c1-4b8b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 5941c7816891acca64ef2db52c61a97894076252b60a55be3fa56c1fd06e79c3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f673dffb88247f85d5a4ea2e3491d455']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80f-c068-4a6f-be8a-40db950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 5e8f154b9267e213df28433ef8b3244a75999522ff33c73d30ea9137bc4b0e06)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bd404a6236d3a6c7f1f5d89eebbb1d09']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a811-734c-40c2-82b6-41cb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:05.000Z",
|
|
|
|
|
"description": "Automatically added (via eea7e7b1f4e7b12dd4b0d178466508b26db7d3891d25165400b3e77a3cb07c0d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '936f4cc9c80cc6fb1026db18b36abcf2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a814-b4fc-4eb1-8434-4ecb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:08.000Z",
|
|
|
|
|
"description": "Automatically added (via 12da3633cf737462d40915f93296f00f640150e8c85141aaadf4dc8afa1616fd)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '25c8f0dbacf3ce8c56d0dbeca1e833cf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a816-7e50-4294-b34c-4061950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 0620c4e2d109458b9938c2f12afce6cfc269f209ab484c4fbb85fdee3d9e17fe)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '98fa0e21a92fb0586c3ae083b4bfb4bf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a819-f3f4-4a5f-aa25-4d08950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:13.000Z",
|
|
|
|
|
"description": "Automatically added (via 70cf05eb46de59b793ba6c11c330cd5b04916e57dac2211f8f163115b257ee7a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1705564184a378d69254dc9738c01154']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a81b-992c-4aac-9d64-47d0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 22b09c330b65a4f808f20381d0647563525a1572fcc46533f5cac2902bc6cbc6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '274e132dc065f6a647d1f5fa8f9611cf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a81e-9598-4220-81a9-409d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 2a51ce91027bdce64d8d46878d42d4ca4dbb6909443016456369057bb6e6539a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'afcb85abafb27c1567911b9b8fa7097a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a820-8c20-48a3-9b87-4f74950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:20.000Z",
|
|
|
|
|
"description": "Automatically added (via e873910174af539b73ba521ed1ea6b8a444c1168b084e7d9baf5009258e81132)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '12356552f54ff5b79e975872d2f1312d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a823-8d60-4dfb-b65f-4be2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 107dbdfd69ef45fa2a2b711851b46f3570eb89e2c4224b7138a130f9bd786a62)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4fdb226b6bbf3aebf9a62a2b64bb43bd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a826-bc08-4389-ad6d-42e9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 28361a778928826650850df8ead254d1439d42441827c1f8e8d342a6efee42fe)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '74097cf1e8ab50ae32013436bcd201aa']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a829-6f98-4f4d-9ef9-4f37950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 73996e06835f8d0b9e374762b2632f146b440ca252a66661c9a1489a4d81a0c7)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f728de33088d40603af8b733f3974006']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a82b-8714-4c80-908d-4d39950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 7fc91eb144b4d819291c58d52b1977e66a4dd3a63ed1ea41ef26723b04df4750)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '91a7b935cf6b2c854e4dbaacc53fb423']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a82e-992c-46bb-9b0a-419b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:34.000Z",
|
|
|
|
|
"description": "Automatically added (via c24cef600a1318b6d0aaa08a3d5eeb19ca88e924b64c33144badecf08f3f4b7f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'bb9343d89d5fa830828b1fb63a77b108']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a831-4924-4c78-871e-4a9c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:37.000Z",
|
|
|
|
|
"description": "Automatically added (via c568cdd075c1fba3232fc67ea4f927d608104ad9ab2d921e42cad4e96b678595)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '62e3280743f885b8ba3d89fae9622bc5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a833-1b7c-4aae-86e4-4516950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 4fd5285211359406bdb99fe8e1bf88250fdefa8e55d8190588726638bfbf137c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '719576800295e7681b189e703ed02d8a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a836-1818-4613-9726-49a1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:42.000Z",
|
|
|
|
|
"description": "Automatically added (via fd67c00f427b5effdb5d831a72416c97c1277d4d8eafd7d02163b2bba27b5ea2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8b3bfa3b0b4a11fa4606a068440b125b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a839-1130-477f-9d1a-4acd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 708f0504bd0db78504b78e8d7374549ccd5fc6315ca9962f4ad01590d61d7ca4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ffa6c3fffd1dbf4664447ca6f9a1a0eb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a83b-1090-4ce2-bf34-4d95950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 0adec19187eacffb24b1c811810d8bfa87cc20a3031f8587c86809d8405a5950)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '092ddfa2b88b0915c14557ac54ba499d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a83e-6ffc-47d7-9122-444d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:50.000Z",
|
|
|
|
|
"description": "Automatically added (via b67e8bcfa47788b2f92741d600a375a7ad9349c599639adb2723a6d21f65aa06)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd0608ab6a471497639f78397bdbf28cb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a840-f250-48e0-a5ee-41cd950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:52.000Z",
|
|
|
|
|
"description": "Automatically added (via bc74071596921a6d460c11515e732e4b84ac927406c8c6f6be9be36df5764758)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c11945d182e4335d2c43d0caaff0b09b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a843-7db8-437b-92ef-41d5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:55.000Z",
|
|
|
|
|
"description": "Automatically added (via ff9a69dce30de1c8ad2c4cb3ee9eb64272d0434c8b8ea694d5ccbe1e5a9b57e1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'cf70616c2bd39c2fa1b89b08a8b6e563']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a845-bbe0-489f-9bc0-4ce3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:57.000Z",
|
|
|
|
|
"description": "Automatically added (via e74bdf1a5f1a4349d1aa532115a0e86050121d554c5eb323b6402465c08ed790)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5ee296113d79728e5fa03de7215e177e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a848-5240-46d9-89b9-43ae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 44988bcba49ee709b6bfdf7d6a8f38457cf629ad16d0d97de3c26d3507db9af3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a359f6ee84d6393f97837ba8ff1bfda0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a84a-336c-4288-aafb-4d11950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:02.000Z",
|
|
|
|
|
"description": "Automatically added (via a800a6dffc87b26a843c3b76608fa6bd818a82d8a4e2a079ed4312b20153eff9)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '25ab05908533100667122ffbe178e792']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a84d-d3ac-4693-b0e2-4780950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:05.000Z",
|
|
|
|
|
"description": "Automatically added (via c582f60ee71785924b1f56d6867dedf8c7f43370aa30d62dda6217da98496783)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a1012d17aa8c90b5bd235caaa942f71a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a850-1314-45f2-bf9e-4107950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:08.000Z",
|
|
|
|
|
"description": "Automatically added (via cbade24c31a1808c22eae6668df15f1ec9e91cadd75a860ca1aae5030933396f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4cb52291d1ea75b75477e568cf5a54e7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a852-04f8-4726-bd96-4bdc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 9e6cfd39d823436f948a65d7263e0bf951fa56d53f3168c0290605cd662f7abe)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'aaea962e27e1b38f7f9d585690f85de8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a855-cef4-42f3-a31f-4859950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:13.000Z",
|
|
|
|
|
"description": "Automatically added (via b5e817f782b6f95ea4e7bd8feae8cbb41e3c80c8967c1c16e677856d89867cf1)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '932f2a314d776d68e87246cfad5ebc41']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a857-4064-400a-8f9e-42f2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 24194c4e5b0aa0d33248aba5bf66dfb7f84e2a27dd05bb541e0131380a6f2e48)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '70f40899a42a086298ecea07e439dc9b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a85a-2948-48b4-9fe5-466f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:18.000Z",
|
|
|
|
|
"description": "Automatically added (via c71c2d4f2a680a8941107078821f71bb204a2a7563b3da20cb9262d1726799fe)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd4f4c5c34249184ac886af4cad6b4cc4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a85c-d360-4253-b7f2-494c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 42297275853e5f6bf99a12d618b63a9c4efc458fb700534c50a4c498871fc0b0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a2534d8070106ef9131a8712e708b49d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a85f-11e0-459f-ad59-4140950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 5849b8413af68584d8115bb85bd594b97cb478f03b59f045740094c8608c656e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f52f5cb3f7c85a71808452899febd11e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a862-f6e4-4333-941d-421c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:26.000Z",
|
|
|
|
|
"description": "Automatically added (via dbba780da55ba6441eec4e60d65bd1a8d5e2f58f8c7b69284eb995d41cbfc93f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a2146fae1bbb1d0c9d7b3432d9348af2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a864-bd84-4c62-b52a-4738950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:28.000Z",
|
|
|
|
|
"description": "Automatically added (via cd51a6bfabaf772c26d978a83df14cd04c3bf972ea461f582c4ea9c5832f462e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '89753216a38700a38bcbdfda0418efbd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a866-690c-4baf-a5e7-47e8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 16f17a454a0f47d3dce729fc72ab557aba983e634854c5ff2a159a9e05a1e1e7)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'dc89900dbed42087c95e0db6ed59670c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a868-4960-4fd3-88b1-4fcf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 53a7e0dd7d46ae1b83a7d6bfb209544adeb04bd022e178534528791dc741da89)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4b84dfcda7e4c7ea7b2a86d1cac02d83']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86a-e920-401f-8397-4405950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:34.000Z",
|
|
|
|
|
"description": "Automatically added (via cbfbd03cec824bd8de78281d4915110d4cd3984ba23c3ab5dc84313b17f44f92)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '00e4e77274b0825bda44545093512bfd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86c-5198-413a-b6ed-4d84950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:36.000Z",
|
|
|
|
|
"description": "Automatically added (via f98ecbad7ca4115e43c45951d5e094cb2f34ea37f1f078aa7cab3fd24646639e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fc2191108b02bf45fecfded61c96605d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86e-5008-4dc4-8db9-42c5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:38.000Z",
|
|
|
|
|
"description": "Automatically added (via d6baeb5c94bb1b50918e1b1671a55c18df66ae5edbf719ccb286643998b39019)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7498e81bd3a722072b6fed2edb6b6dbf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a870-d650-4b0b-940a-4178950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 23fe906b05347864772c761aed1dc425d451a9905e226b13bc885802ea82886d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ff9895faac970814d06f2f8c8a18d93b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a872-ff08-4063-a1da-4287950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c9e0593aa541f9a04c11757a9a9677392c4b55d0ac0252dc55bcee1efb7a2b6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ee3f5084cf80f1b76ba397c69f0c58c3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a874-8f20-4812-a0e4-4c35950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d309ef956645c5f67520950cebdbe5442b5048cc9df59d3cc54cb670275b2ad)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ae27c182abfef2d16fd5e2887806eb68']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a876-aa7c-4794-a99f-4293950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '34f5faa94cf27f4f037f4bdfa135747a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a878-77f0-4bac-91a2-4688950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 4bbe157ffc6543647ca9049c3ee5ca66d711e2bb7f17e014fedca7a3cfa0f82f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'df08a6c87b1b1002502b9cb68fff83f9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87a-131c-4750-affd-45e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:50.000Z",
|
|
|
|
|
"description": "Automatically added (via 0b6344113f392f9fcbd9d3b5833ce2a6fd25260e7de6a08f4a8320e2256c6d86)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f591678835b889206cfa5549f362ad0f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87c-0de0-4c73-883f-4dc0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 6bdabf7397460a0d7a1093012116c84cd61d8fa10b01c6582d348a73fb6c846b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ffa66b68eda7c89bce9a7f479a6989c9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87e-080c-4dfa-8cda-4197950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 379b2064ed3c457df96b3c410d0324b75d0e2177bbbad469b74f3073211ae12f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '51080cd54556dce667bd04558bf46840']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a880-dccc-462a-a049-46eb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:56.000Z",
|
|
|
|
|
"description": "Automatically added (via e4aa606c8dcc9e666b086fd1da27aa85722aa53ab9440b1625b78e06747197d6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a0a8ad19539995d11359597870fcea18']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a882-5824-4edf-9317-44ef950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:58.000Z",
|
|
|
|
|
"description": "Automatically added (via dddff32cb1b2d0307321259d0903888f7beebfb6508da292091e707ea38a6fc3)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '2672c40fb7f5c423fac082c4c00211be']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a883-da58-4a72-9697-4aba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:59.000Z",
|
|
|
|
|
"description": "Automatically added (via a6f2b7294e270d3681d4bf9f7a4ff37537a809386587999bb8c2d4cf0e81a947)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e23d3c735a5a2c5915b1b6750b6aacdc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a885-81b4-4484-87ac-4e8a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:01.000Z",
|
|
|
|
|
"description": "Automatically added (via ab61ad1fda9194d19581a1014602f011e8c279483ec71a88d08de39b495e5c1d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c47c6d661ab0d14a7c1bc7cde54850be']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a887-9ef0-4471-b6df-4b92950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 7c98f1a1afdbb0eb7945570c683e4876786e6c1e675db97e3462b5664d7f0b92)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '83a89116bfba8221ab5d47eaf70ebcde']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a889-0bf8-4c46-a316-4f17950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:05.000Z",
|
|
|
|
|
"description": "Automatically added (via fed45a9c66f872a7cd618b564b6719e6c677bd854a2f3b1c81632668d1fc9803)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '77fd87299e1270180c0de2fc5b8fff53']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88b-b230-4623-bbf1-47d3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 3b8b8ac6614d5a2891adc47f988deceaacce0b8925cdb5f5cf30c41b88df234b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3044e299ca39a6a1f3d5ade92d1359df']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88d-324c-4f82-8132-4f51950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:09.000Z",
|
|
|
|
|
"description": "Automatically added (via f76b125a25584f9f91d29fa5d5b14932084184bb78205a657235fed1d2cd69d8)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'e23b1eeed34a387912162e5619c4083c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88f-06d0-4902-98d4-4522950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:11.000Z",
|
|
|
|
|
"description": "Automatically added (via b0e421db43b71718af6bf06b667659642dd68bddd513b4ad62d922d1f0c09b62)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5995960a4c8b894b9c39e042ebb1e584']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a891-a7ec-4f18-b9b0-4cd5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:13.000Z",
|
|
|
|
|
"description": "Automatically added (via d581d7b834bff8f64cf7c1fad20430f7bc54c18ad1e08306d871ef6676cce31f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5a5c8edeb33d9a1f1562eb3ec27e4d50']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a893-13e0-4f34-af3f-4e9f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 73799ea1dea5d9df99cc53a79672f63aef1a25c91c718234a4145eb28564e589)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '08adad5c88e045c7ea23d25431c799bb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a895-d838-4ff3-9c46-4afc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 18fcb27f69177897f99b26e0139ebe5dc3ecafba15882a1e06a287b14ed4cb30)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f75932d28583a52a1e2a77aae47b2072']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a897-1604-4609-a3a2-4685950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 49c0b9be71b0c444ed76ecc83a89cc8cb84fb916c52decc56b08756d0418a0fc)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'dec48994f0e94320c4f5635b81b2ee36']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a899-8708-44fa-86ef-4d98950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 84359e0f5a05e716d657ec3b458cd909350c6c2ab5edd1d52c8fcbdd079210e9)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7dc6077b5e97faad6ff7e872fe02e147']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a89b-815c-4bb7-aa2b-4f6e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 120198b1b54cf8381283afee7c06f5e83c0503a1e99c8e63eb96fbad484c9eb0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fae32655aeea1c757d5e3d37fdce7231']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a89d-1f60-4edb-b5e1-4946950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:25.000Z",
|
|
|
|
|
"description": "Automatically added (via cd60aa7d2d72039495f7747ec229c681c73d99bc9a79f204a39d7d463a9a9d21)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '06d4482985d91cd30a3739d174dc620d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a0-2b48-4d22-8885-4990950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 98d5cf98011408b9f2da202600c20e0f3ae2643d62bdc8ffb025d22cb1300589)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '57a15cac70fcf9a2a8e13075d8c4ef34']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a2-cbb8-47e2-ad1b-4117950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:30.000Z",
|
|
|
|
|
"description": "Automatically added (via bc09d80b14673f008757e321bedf5155683731a109930cc45bade75d3810e024)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5381a1b82fd596e173db6fa85cb86ab3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a4-f4d4-4d04-acb6-4d56950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:32.000Z",
|
|
|
|
|
"description": "Automatically added (via e18ded70e4534366e7793eb455d0bf7013a1971d69375aea64c3bc264fbc376c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '64e59234449b06012bf03150e6035dfc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a6-6088-44a1-9440-402d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 593b37c83f59ad672a9e86e6d93c052029cc7a50b488615c11dd3e1b49e1bc6f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6bebdcfbc4f85ef3e0e8309b3d3878c0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a8-3e00-41ac-91b2-4877950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:36.000Z",
|
|
|
|
|
"description": "Automatically added (via 853085d9abcad44c467e99a47c6a2f79b9b7479aa340a76bcfd6afd38ab1d10a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '607d71f8d448f94e25dce858df56a919']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8aa-8e14-454d-9ed6-42ad950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 9281a34301476b13287400ed3debbb9fe6e2d94880b92b179ced240e33bded5b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4790e5a6ad4a8df94fef66c9c3e011cc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ac-7acc-4387-acd0-4949950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:40.000Z",
|
|
|
|
|
"description": "Automatically added (via c52af0a71e46e63698263bc8bcc53f4b0a307bcd250ac1bff14f4e220a1188e4)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd296254847c24390302bee35a94d9c38']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ae-21d0-4189-9ee9-4a51950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:42.000Z",
|
|
|
|
|
"description": "Automatically added (via c406061e326553c2c601eb4f85e0d33fdce2a48aaf801a38657df95e3a49f669)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd99de96e71e500c1ee526ecdd85deda1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b0-bb6c-4be8-b14c-4616950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 95e06c503d163a20531516e570a3ef433bc72fd143ebb0d7b40b98508978f31f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '30968fc1ec7fec83562f4647002f5418']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b3-43f4-4962-b3e8-4da8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 3bb54db547b7bbbb32124ce6040e3ee9ad7e796a1b58bdad7d660d9949ca9dd6)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6e89faaf6c93aebad352b6a61ee6d25f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b4-9d88-402f-8236-4b0a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 8a2e6027b8c58c35a074bd9cd9619f515248bd8ba5392bd7859a4ba9b1abe369)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3ec3e9962abfafc5437a4236ed7a6334']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b7-e95c-48d0-8d7b-4b8d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 90a9a0be49520c872d0a75f22809f341691624d68ce6ff89ec660a62d0106b3a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6ae1357b11b2a6fffb43b68fbaac4ca6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b8-2564-4fc3-afce-4845950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:52.000Z",
|
|
|
|
|
"description": "Automatically added (via d6aa89a9573e9d2818ea2222d58cc663079a1da4cc5fe8c2b7f7ea97103718b5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0dfc6ef41abff2b97fb892fdc9112e65']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8bb-a088-458f-897c-401f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:55.000Z",
|
|
|
|
|
"description": "Automatically added (via db46099b6046d58747bbf13b285999b3aa84a71656631ac9fcc4e2eb9ee72dba)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd32478c71b3535596cd19e4483656ffc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8bd-0a20-4ab7-b57f-4505950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:56.000Z",
|
|
|
|
|
"description": "Automatically added (via 1cc4db1f101f261fdf9617dd1457e2505568956fd55405c19da4450c18464faf)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '264599298c69650b8ccf76e72bd43872']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8be-9bbc-47b1-9873-4fd9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:58.000Z",
|
|
|
|
|
"description": "Automatically added (via db7bff2a7fe7b45d341d4b1f5f240ea67bd2f626cf1964798b37b692f8726b85)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'd823e65a04855d44f42051bf7d9b5d72']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c0-e7fc-44ef-b2c4-4d93950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:00.000Z",
|
|
|
|
|
"description": "Automatically added (via b94cf13c9e9b55cb65bfb0b09ee7912a02434adc4bf27d804c88715152f0ddcc)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '259463dae18d297c48d550ca7f46986a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c2-3e48-4b97-bf9a-4dd8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 81082ffbda2650c1390a3d177f4b29a6abe53d838f22e8d45020c0570645f9ad)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7b96dcdaa45bb4ba57c231a751e897ee']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c4-cb48-4828-b8c9-41af950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:04.000Z",
|
|
|
|
|
"description": "Automatically added (via afcbb77e7063a5386bb36713c8b1c9e3c236cf22708102d028ef6b4554089bed)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '137322dcbc5e40401d4fa99738d38776']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c7-ef58-49e8-abcd-4729950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f66a759b8cc023f5cc90d5e43887ee002beef6822867ce910e345d9105c5304)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '75ddba374725cade5a205bd17dbf7562']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c9-ea84-401b-b77a-4fae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:09.000Z",
|
|
|
|
|
"description": "Automatically added (via d8a96eccad3e0c85da48ff5ede2dee4aa948a1454cd8e591d5a486189cd798a7)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b367742830d4da53d1da9f554b6a0a8e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8cb-f914-44f7-baea-4c98950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:11.000Z",
|
|
|
|
|
"description": "Automatically added (via d329e95e64e57d158dd0a97ea0bb3f235f27aad158da59b9ffcf63e8e4f98c6f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c976f1ae878d1e024ee7ae959666e996']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8cc-b9a0-43ed-974b-4e43950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:12.000Z",
|
|
|
|
|
"description": "Automatically added (via d62ed988a6ef9bfcded580e3fbd6c5b286b831adccb84746bf620d95c298dffe)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '399946030d03b0196bd89738f3b9ee1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8cf-8208-42c8-818e-40fc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:15.000Z",
|
|
|
|
|
"description": "Automatically added (via 580c33bb18d3fd32ee11176e458a98e28094570ae57cf8f5640373618545fb54)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0869b501b6cea7abd1cc7c17f9cb6bd6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d2-48c4-4018-bc43-40ec950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d0d294a58e34ac6c76028c01d3730f3ef13404470ec469de0b366701832017a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '74294e9500fb28b60de425996d1c2949']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d4-68ec-4215-bf24-4810950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 971374527d4406e2f93bc124a6690cd977b464a7d84e7739088e07e94b4c0aa0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '91ba584b6e1d5fa38d37916b553814f0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d7-0e80-4867-9d78-4646950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 51e5cdb5b15af69b2020749ec082c8835211a5313e2dde2a38504011629220f2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8f5e5befd8a3c52662a64343e7ae3735']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d9-e8e8-4fe6-bb22-4f83950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 85f5d9b9a2afc22291c7e8bbe93024ad15535a8a1bdfeae7250956794aeb3556)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f264fbccff9963c8f717bee3f53526cd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8db-8808-4e06-a6b2-47ae950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:27.000Z",
|
|
|
|
|
"description": "Automatically added (via 42506dea1a2c992f0d4cceeb75009d822efb6e505d56d06285e4acd10fa82a1b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f570962012552bb0585f7e1fd127f9a4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8de-0688-425d-9366-498a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 359d6713e3211dcca6a6b3774413cf6621267ce4a45bc30ce045096a7d26f137)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '07aadc0d0cbaa50fb71d9d3df883619d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e0-baa4-4e29-abed-4750950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 9a829f48a22c2f551cd7595fe84fa5aa51f274281dda637c4a88c79feab1f495)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '242b71a43499a8f766c759be33748086']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e2-fd58-4a0b-b7cf-407b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:34.000Z",
|
|
|
|
|
"description": "Automatically added (via f6150eff4741bc12acfca5530fe8379dfd147663a7d6541f0a6a60517a834030)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c047d5aaaa4a4ea3679f8d277b87dc2d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e5-0ab0-467d-b2ae-4560950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 9bf2d9a0848e69e1219137625c356d706e18ee89ca40d40b9bee8282d861fe9e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1fd5f31bb85f705429edea1f5e96e1ed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e7-05d0-451c-bd32-4596950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:39.000Z",
|
|
|
|
|
"description": "Automatically added (via d6a8691a7764793db847827ba81ba0a2df26176ece0876a6360fb6fab9d39579)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6905e1cf2f1ca3dadda68600f0a15e74']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e9-d23c-4ac9-a50f-4b39950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:41.000Z",
|
|
|
|
|
"description": "Automatically added (via 29f502d26d59ef2f69014d601a46808950d00892b75433359320e8ed5a282f4e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '6b8ce5d75e02b97c49c03065de4a95d5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8eb-90ac-44a4-b6c1-4b5d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:43.000Z",
|
|
|
|
|
"description": "Automatically added (via ee9da0114285db278b5a468a7f1dceac57c23f4b901065d8eadef0fa39dfd6db)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3d3a928bbebf541ff7d421b83c94fa8b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ed-52bc-4720-bc32-4893950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 305bcc6026bbc23ee399556d04bd9e688ab2bd46b21ca0ac23d1c0934c09a6bb)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '3c5d0ff43396b07b324f622168d0df97']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ef-3cf8-4458-9469-4941950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:47.000Z",
|
|
|
|
|
"description": "Automatically added (via bd632d8f370afa1f02125b41fbbd35cb72fd8333848f2b471da2a52cd6fba1ed)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'fff073a199470eabfe11c46e5fd852b4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f1-a9e4-40d7-b61b-4cbb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 23c12048e0ab7b20bda279154c673b8b4054ab5e19acbe0146564866a4f96abc)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a6ac25b6cc87cc42c3988f993c783fad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f3-1220-41db-b42c-4daf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:51.000Z",
|
|
|
|
|
"description": "Automatically added (via f738707c76082f8c70da1c6840d1add38c4b2d946bcd919a50cb3a22111684b2)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '98ea3557fa94aaa2a3d85cd63a0184db']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f6-4f44-4005-abcd-46c7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:54.000Z",
|
|
|
|
|
"description": "Automatically added (via d8b09a39b955d164a62339024415f72a79da15729bfa81b95b31fb1f95463e36)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'ad7ac1feca49793e39f15374631a6db1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f8-8618-475c-90cf-4585950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:56.000Z",
|
|
|
|
|
"description": "Automatically added (via 1002140275ae2e8a89bdf9c6048d763f1dd71dcce1e5d0ce22ff8a8ec20cded5)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a87de204ec989b8ef1107894c7f37006']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8fa-ffe8-4f70-9379-4f94950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:58.000Z",
|
|
|
|
|
"description": "Automatically added (via 31807918fa69c4090052a7f9ee32d9f6a1284287ce4d05afdb5cd87f9fc0dd64)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'f08f64d6119cb4db3e9b296e0e1769c7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8fc-ee14-4894-877f-4cda950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:00.000Z",
|
|
|
|
|
"description": "Automatically added (via 659ad690a4db4490af69111e8ff5a30feaf255b0ebb70366359dc8f590cef719)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'de376537543b75be038d41592e5bfc7b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8fe-215c-4d51-af43-4c85950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:02.000Z",
|
|
|
|
|
"description": "Automatically added (via 3c3d071ef44ed668063d55dda90e9ecaba44b3997da114710a9d34965c93ca36)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '831ffeee1866b623d12863223639abec']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a900-1a74-4f48-b8a9-45b6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:04.000Z",
|
|
|
|
|
"description": "Automatically added (via 70d1d1d561f8a9d06c485366b789f6b6e6ba3febf90cdf4ca900ef96aa93df60)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '1a04c2cdd428cff42e857088e1341d15']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a902-0db0-4528-83c3-4444950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:06.000Z",
|
|
|
|
|
"description": "Automatically added (via f65dcc3d0bb5767a518305fd408881e98630c4ed3716c8915d61a7495f5a6971)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '9ac1e02d7fdeb6ee8a95afc4e71077bc']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a904-106c-490c-b669-4edb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:08.000Z",
|
|
|
|
|
"description": "Automatically added (via c4c0ff103ddf29c92ed9c550acbb3a87b728f8fd0859bb0ba7a90f2c551f955e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'c145de5b846477db45f76f0210da4eca']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a906-e050-4e22-a4b8-48b9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:10.000Z",
|
|
|
|
|
"description": "Automatically added (via 2a2b063e06e878dc2e9f63c3546370b540b9bf58c8e9946673200ffa30800aa0)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a665b8b09f7009e8ffb156a0ec75c143']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a908-4f5c-4717-9c22-4ee5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:12.000Z",
|
|
|
|
|
"description": "Automatically added (via 072c0d91dc547764ab7f5fb1181606612613b7d80dafbc8dd47150513aaa237f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5a6943a60a228f17a2f4474c6bbb049e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90a-9ad8-4ad2-84b8-4c3e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:14.000Z",
|
|
|
|
|
"description": "Automatically added (via c32124386277fe9e0b05ee5b3f007ddbfa669b837909ee8e4d678f513bacac1b)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'cf615e1da9b537c002089212cdbc02ef']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90c-5410-4707-94c2-4f91950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:16.000Z",
|
|
|
|
|
"description": "Automatically added (via c54ffdf658f228ffd60789fc7e81853ba6196df0a08fd97ec72969c428f70a6e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '893511bbe4c9290d066804cd04300f81']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90e-7860-495d-9bc7-4997950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 4ae437aefadb6f99db28fa7d9fe099b33e8cf98513606475070d0d824541ba2c)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '0c4f72be5ce5e105b22c38062a200ba2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a911-a3ac-4d48-99b4-4e52950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 880a923211231ad3f375aa58e01a6f41ee9b863fabfe4daf30de88183e20a75e)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '11c2dd062df305b0f790659df93358c5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a913-03c4-4c57-90df-4211950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:23.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:23.000Z",
|
|
|
|
|
"description": "Automatically added (via 2d27fc913ce3d325476ebc1511cbe687b62568d6e4bc058eb8604857c928f12d)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '7850ea43cd495c17a46603e5b8b4593b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:23Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a915-881c-4175-b31f-48e4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:25.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:25.000Z",
|
|
|
|
|
"description": "Automatically added (via 0024d27614933d13f0ba3c380e28558d9470861bcced22ff2be822ec098a8646)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'eaf55c55988ed438a1ae8f9807ca14a1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:25Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a917-7e2c-4f56-9b8b-4da3950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:27.000Z",
|
|
|
|
|
"description": "Automatically added (via aac3e54a4340549960127605eff38da1bf91531689ea35d1e750d0bf7323c321)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '5c12618f10eb1075e6d98fe01dc9c4b3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a919-bdf8-4937-b47e-41f7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:29.000Z",
|
|
|
|
|
"description": "Automatically added (via 4174d5998ca903811426307666a9ec3c99057fe2a70611d3a6d51f239ff3f91f)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '8e4f846d7d6c7b3b342a5e19c9ae87d6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91b-013c-4e3a-886e-4fb0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 7a0533bef6c2d5b3366b3c15c303f855fe31b7872447bdf3fa31683efb82b757)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'a3d929a7fe1cee745ac4ad896abe2373']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91d-ec1c-43ea-a5da-4a12950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 035d8f4fe7e27f4294d0e0ac15a8d451942b6cb02395c7dcb250f8cf0d292bcf)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '81e5d6d52ba13c63cb0aa36b83e0418b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91f-22f0-4580-aa05-4ee2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:35.000Z",
|
|
|
|
|
"description": "Automatically added (via c4257d68d6677e8086800cc2269e906271dcf3c1c00c4daeb7d0c17a21583b1a)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = 'b1694a8e3b0fa8a10d641dfbdccca1e6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a922-6868-4c3e-abad-4483950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 0e80bdfea3b0f07d1dae27036ffd0bd9de585e5e628e062d4b1010f7db07b7a9)",
|
|
|
|
|
"pattern": "[file:hashes.MD5 = '4cad2267672d48fc470fb487b9276d70']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"md5\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a801-40ac-4de8-b2c9-4573950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:49.000Z",
|
|
|
|
|
"description": "Automatically added (via aea95365a40b0bfe047907e34f6bfed7444c27e4a897da6fe390358f5941da3b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4c0e1c4a25f11a9627d66d216820f114eb053985']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a803-e184-4ae7-99bc-486f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:51.000Z",
|
|
|
|
|
"description": "Automatically added (via f7581a28c90208487380fb7ba5bb931d6cf4d2187ede73986afff9824ceeb27c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '23588478fbcf434e24cb938758f6567ce17f54c4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a805-9a78-4ac4-b4bb-4eca950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:53.000Z",
|
|
|
|
|
"description": "Automatically added (via a93f9720f198776e4ae04ef599acb713fd8d95c4f1539b843942007000367d87)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c28278e57fc4bbd1ee510a54501ca406fdd68aba']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a808-5a48-4134-bf6f-4056950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:56.000Z",
|
|
|
|
|
"description": "Automatically added (via 67171f3b6d4a281aa11b34320296186ec2f37f2a07e1bded06763a8893b855eb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '45526aaaa31ffd5ade52bc7f479335089da94927']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80b-4b34-4b32-b108-40ac950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:40:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:40:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 9da61001549cb6cecf95fe6bce17a3b2b3b8b3639139274f0d64adb6fb2f44e3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'cbacba8633702dc2d044a1cd7d90b142613fbfd7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:40:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80d-824c-47e9-8f66-4887950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 5941c7816891acca64ef2db52c61a97894076252b60a55be3fa56c1fd06e79c3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3c898737f5f46044d86dcc97255a80b1da39c1ad']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a80f-e594-4def-9f86-4841950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 5e8f154b9267e213df28433ef8b3244a75999522ff33c73d30ea9137bc4b0e06)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '20eb9b365f8bf5939b582cce52cfb8d23937236b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a812-e120-47d5-b1e4-454a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:06.000Z",
|
|
|
|
|
"description": "Automatically added (via eea7e7b1f4e7b12dd4b0d178466508b26db7d3891d25165400b3e77a3cb07c0d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '404e3e4b6fa42485c0085f9c53dc66ccb318bc11']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a815-599c-4a17-b5e0-4911950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:09.000Z",
|
|
|
|
|
"description": "Automatically added (via 12da3633cf737462d40915f93296f00f640150e8c85141aaadf4dc8afa1616fd)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '39f14b0887dc62044ee253c1b4b3fe2feb5ce3f3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a817-9b2c-4fee-9011-4943950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:11.000Z",
|
|
|
|
|
"description": "Automatically added (via 0620c4e2d109458b9938c2f12afce6cfc269f209ab484c4fbb85fdee3d9e17fe)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f74ede2029e62a6d21f982b04a54e0f5000710bb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a81a-f6b4-4126-baba-4b92950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:14.000Z",
|
|
|
|
|
"description": "Automatically added (via 70cf05eb46de59b793ba6c11c330cd5b04916e57dac2211f8f163115b257ee7a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '81bbb9acd1ec0c8233402f2a9f81b7cb6c3ee784']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a81c-5ab4-4431-b3c0-493a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 22b09c330b65a4f808f20381d0647563525a1572fcc46533f5cac2902bc6cbc6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5edf94e56b90987ce177d0c16b2198da0cd4b952']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a81f-b0bc-4376-bf08-4c02950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 2a51ce91027bdce64d8d46878d42d4ca4dbb6909443016456369057bb6e6539a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4250a5965f699d2459cad25db9e60b739a481c16']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a821-24b8-4175-914b-4a14950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:21.000Z",
|
|
|
|
|
"description": "Automatically added (via e873910174af539b73ba521ed1ea6b8a444c1168b084e7d9baf5009258e81132)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '842be2540c6947b0a268128262460cd411aca11b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a824-1830-4901-907c-4332950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 107dbdfd69ef45fa2a2b711851b46f3570eb89e2c4224b7138a130f9bd786a62)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '00afb9fb275c5f8835612367edb4d420061616f9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a827-88a4-4218-89be-4041950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:27.000Z",
|
|
|
|
|
"description": "Automatically added (via 28361a778928826650850df8ead254d1439d42441827c1f8e8d342a6efee42fe)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a35dc139df89f3128762387422660666469edd56']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a82a-053c-4d23-8af4-4efc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 73996e06835f8d0b9e374762b2632f146b440ca252a66661c9a1489a4d81a0c7)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a196fcd4a88ffd9ac999b2679ee766842e664538']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a82c-5418-4bb5-9438-43c4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 7fc91eb144b4d819291c58d52b1977e66a4dd3a63ed1ea41ef26723b04df4750)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '959cdc8ff149a0aea1e9c432fca129db2d03cef4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a82f-f5d4-4ef4-9f42-452c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:35.000Z",
|
|
|
|
|
"description": "Automatically added (via c24cef600a1318b6d0aaa08a3d5eeb19ca88e924b64c33144badecf08f3f4b7f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f53f24381b4b4eda926ac5a4e2cd925cedea78b4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a832-e000-47a2-9b7b-4f8e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:38.000Z",
|
|
|
|
|
"description": "Automatically added (via c568cdd075c1fba3232fc67ea4f927d608104ad9ab2d921e42cad4e96b678595)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4ad185c1db57af251c39fb9e146bc6e8ba65fce5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a834-f058-4f38-a0b0-463b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 4fd5285211359406bdb99fe8e1bf88250fdefa8e55d8190588726638bfbf137c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'af4e5979b9928587de7fb2054ed61fd0c34b52d0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a837-2f40-4994-8246-483f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:43.000Z",
|
|
|
|
|
"description": "Automatically added (via fd67c00f427b5effdb5d831a72416c97c1277d4d8eafd7d02163b2bba27b5ea2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'bb94385cd1e9fc3cefdbb3d4948ccfeac5309424']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a83a-ef4c-4a73-8a45-4c0c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 708f0504bd0db78504b78e8d7374549ccd5fc6315ca9962f4ad01590d61d7ca4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c5ce561518d77a62b5c9be8ac600e21f853096a0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a83d-cb0c-4d11-bc71-4ce8950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 0adec19187eacffb24b1c811810d8bfa87cc20a3031f8587c86809d8405a5950)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '55e036fc4532d7657e5706ce5f2536ad5d8219f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a83f-9848-4649-9446-441e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:51.000Z",
|
|
|
|
|
"description": "Automatically added (via b67e8bcfa47788b2f92741d600a375a7ad9349c599639adb2723a6d21f65aa06)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '39482c7df84ee769d0df54a196dbf2bcf7ae8521']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a841-c010-4dc1-ade3-49ab950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:53.000Z",
|
|
|
|
|
"description": "Automatically added (via bc74071596921a6d460c11515e732e4b84ac927406c8c6f6be9be36df5764758)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '534dc504b04589abf84dd80fc9767c8fc2e787f2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a844-8500-4069-9d4e-4242950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:56.000Z",
|
|
|
|
|
"description": "Automatically added (via ff9a69dce30de1c8ad2c4cb3ee9eb64272d0434c8b8ea694d5ccbe1e5a9b57e1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '92ee06cc5765f6ef908ef0b22e6ac6446db4f695']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a846-7754-4728-9009-4af6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:41:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:41:58.000Z",
|
|
|
|
|
"description": "Automatically added (via e74bdf1a5f1a4349d1aa532115a0e86050121d554c5eb323b6402465c08ed790)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3178f2d5f4052b9523a03326956377c512abcb2b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:41:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a849-d474-4167-a864-46fb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 44988bcba49ee709b6bfdf7d6a8f38457cf629ad16d0d97de3c26d3507db9af3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c84215c45239ed68f0e79fcf8a7df407be875a9a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a84b-3da0-406b-b1ef-4ebb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:03.000Z",
|
|
|
|
|
"description": "Automatically added (via a800a6dffc87b26a843c3b76608fa6bd818a82d8a4e2a079ed4312b20153eff9)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'fe26f9a10ba6564d5bde0fcbc6bcbbdabccfecf4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a84e-b484-4542-b6fe-4110950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:06.000Z",
|
|
|
|
|
"description": "Automatically added (via c582f60ee71785924b1f56d6867dedf8c7f43370aa30d62dda6217da98496783)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'af970ef2f057982dfb09b1d3771f12d4b7457286']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a851-21dc-4028-9004-4ea9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:09.000Z",
|
|
|
|
|
"description": "Automatically added (via cbade24c31a1808c22eae6668df15f1ec9e91cadd75a860ca1aae5030933396f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5b3b3a57f153376b7f1cac03332d91c4e3f00b72']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a853-ee60-41b1-bb4e-4f53950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:11.000Z",
|
|
|
|
|
"description": "Automatically added (via 9e6cfd39d823436f948a65d7263e0bf951fa56d53f3168c0290605cd662f7abe)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1ca4396aa23ae231a814c0ce159888763c251006']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a856-6fa8-4d13-b63f-44fe950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:14.000Z",
|
|
|
|
|
"description": "Automatically added (via b5e817f782b6f95ea4e7bd8feae8cbb41e3c80c8967c1c16e677856d89867cf1)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b8161bb4f9c8c933a011cd7d92602c06480f1d79']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a859-0d0c-430a-8f4a-4bea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:17.000Z",
|
|
|
|
|
"description": "Automatically added (via 24194c4e5b0aa0d33248aba5bf66dfb7f84e2a27dd05bb541e0131380a6f2e48)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '57b0a896dfed69ed0d05df17bcae01a1c0cf4845']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a85b-7928-45c1-9380-4947950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:19.000Z",
|
|
|
|
|
"description": "Automatically added (via c71c2d4f2a680a8941107078821f71bb204a2a7563b3da20cb9262d1726799fe)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'af019163c927d9b6aa0d36037ad26eff6e61d92f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a85d-d454-4580-be49-47b2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 42297275853e5f6bf99a12d618b63a9c4efc458fb700534c50a4c498871fc0b0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5c22154fd42e668168f734d74c6906f1c477452d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a860-0a7c-4ac9-bce4-4d25950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 5849b8413af68584d8115bb85bd594b97cb478f03b59f045740094c8608c656e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a501400ddb82992f25185804fd56f3b2624816c0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a863-08f8-4010-9579-4e48950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:27.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:27.000Z",
|
|
|
|
|
"description": "Automatically added (via dbba780da55ba6441eec4e60d65bd1a8d5e2f58f8c7b69284eb995d41cbfc93f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f2a2a2b27c57194ba2ff17914343b5c7d9b41cf4']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:27Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a865-2e4c-46f0-bde3-412c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:29.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:29.000Z",
|
|
|
|
|
"description": "Automatically added (via cd51a6bfabaf772c26d978a83df14cd04c3bf972ea461f582c4ea9c5832f462e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5d01c51f03f6076513ebe556675001faf2fd1785']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:29Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a867-8f28-479b-9b64-40ee950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:31.000Z",
|
|
|
|
|
"description": "Automatically added (via 16f17a454a0f47d3dce729fc72ab557aba983e634854c5ff2a159a9e05a1e1e7)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7932ea74bd715d47a8051042c050739dabdc87b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a869-6de8-4cc2-a0f8-4f89950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 53a7e0dd7d46ae1b83a7d6bfb209544adeb04bd022e178534528791dc741da89)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ff6a4e4f32987dc56d9a7915abed000dd1cfef99']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86b-0370-40ef-885b-4175950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:35.000Z",
|
|
|
|
|
"description": "Automatically added (via cbfbd03cec824bd8de78281d4915110d4cd3984ba23c3ab5dc84313b17f44f92)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5fbd593a23b9c2dc973dab2b411ce01bba3524e5']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86d-2fe4-4ef3-b50e-4d7a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:37.000Z",
|
|
|
|
|
"description": "Automatically added (via f98ecbad7ca4115e43c45951d5e094cb2f34ea37f1f078aa7cab3fd24646639e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b61169d495dba3775139296128251b4852ff8ce3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a86f-55ac-4669-824d-4350950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:39.000Z",
|
|
|
|
|
"description": "Automatically added (via d6baeb5c94bb1b50918e1b1671a55c18df66ae5edbf719ccb286643998b39019)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '44768ab1ea0f0056afe06e7311df6f533b6f5949']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a870-e430-4dae-97e3-42d9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:40.000Z",
|
|
|
|
|
"description": "Automatically added (via 23fe906b05347864772c761aed1dc425d451a9905e226b13bc885802ea82886d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '5634eb0b9af3fd28eb346395b27553c67070a371']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a872-bdac-482e-99cd-4dc0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 0c9e0593aa541f9a04c11757a9a9677392c4b55d0ac0252dc55bcee1efb7a2b6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4b1035415ca9caefd85e8bb626b57aeffcfd3a5b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a874-9a14-48d2-a3ac-43d7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:44.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d309ef956645c5f67520950cebdbe5442b5048cc9df59d3cc54cb670275b2ad)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '86d2e62639970dd1fc4c29307154c675193027f3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a876-d00c-4fdb-b3df-427d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 7b4cbcc27e8b8cd05d3c2ef47d7f8febf4b149e2589c0f53c3ac56edcfbcc421)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ef73c66be0afe0b45b83ebd4cd276647de379407']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a878-b870-4f7b-ab86-4267950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:48.000Z",
|
|
|
|
|
"description": "Automatically added (via 4bbe157ffc6543647ca9049c3ee5ca66d711e2bb7f17e014fedca7a3cfa0f82f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b42b7702452f8000baa6d149fa67826e7bc97fa1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87a-3638-4221-afe1-4803950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:50.000Z",
|
|
|
|
|
"description": "Automatically added (via 0b6344113f392f9fcbd9d3b5833ce2a6fd25260e7de6a08f4a8320e2256c6d86)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3a5b5f9bca6f6a92278520daa3afb9398d804757']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87c-a438-4012-8f5c-477c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:52.000Z",
|
|
|
|
|
"description": "Automatically added (via 6bdabf7397460a0d7a1093012116c84cd61d8fa10b01c6582d348a73fb6c846b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c8cd202bd2453711c642085cd6cfbbc0451a45b0']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a87e-3b58-4033-9340-4b8a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:54.000Z",
|
|
|
|
|
"description": "Automatically added (via 379b2064ed3c457df96b3c410d0324b75d0e2177bbbad469b74f3073211ae12f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4d72abec6dde71f20175bdcd0776342fb147dbe2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a880-7d74-4a50-b29e-4685950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:56.000Z",
|
|
|
|
|
"description": "Automatically added (via e4aa606c8dcc9e666b086fd1da27aa85722aa53ab9440b1625b78e06747197d6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '81269f796674e7d812452d9f7d2470a5c5482837']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a882-bc2c-4e42-ba47-44a0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:42:58.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:42:58.000Z",
|
|
|
|
|
"description": "Automatically added (via dddff32cb1b2d0307321259d0903888f7beebfb6508da292091e707ea38a6fc3)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'afdf52313118e910d6070de4d7c30bca6baa1ccd']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:42:58Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a884-2e20-459a-83a5-4511950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:00.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:00.000Z",
|
|
|
|
|
"description": "Automatically added (via a6f2b7294e270d3681d4bf9f7a4ff37537a809386587999bb8c2d4cf0e81a947)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8f1b743e49798b44834d05d8fdab5eeea7c4fc10']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:00Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a886-7b9c-45c0-addf-48ba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:02.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:02.000Z",
|
|
|
|
|
"description": "Automatically added (via ab61ad1fda9194d19581a1014602f011e8c279483ec71a88d08de39b495e5c1d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '065ee8e284a8c0a416f91bf231a95b3f3d5c0323']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:02Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a888-9710-40d4-8a13-4cba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:04.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:04.000Z",
|
|
|
|
|
"description": "Automatically added (via 7c98f1a1afdbb0eb7945570c683e4876786e6c1e675db97e3462b5664d7f0b92)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c2317c36877501b8641c9c732a927717b07c1c31']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:04Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88a-a6e4-44fe-a08e-41e0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:06.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:06.000Z",
|
|
|
|
|
"description": "Automatically added (via fed45a9c66f872a7cd618b564b6719e6c677bd854a2f3b1c81632668d1fc9803)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0b25aff2773da60a73ce876c30deaa94146c8386']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:06Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88c-20f4-4043-a48c-4b1c950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:08.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:08.000Z",
|
|
|
|
|
"description": "Automatically added (via 3b8b8ac6614d5a2891adc47f988deceaacce0b8925cdb5f5cf30c41b88df234b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '430497a445514c1e5d5a9b3513b9dc79498f3e98']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:08Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a88e-4810-4594-9a00-4f25950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:10.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:10.000Z",
|
|
|
|
|
"description": "Automatically added (via f76b125a25584f9f91d29fa5d5b14932084184bb78205a657235fed1d2cd69d8)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '20185bd2c1061a6504e90120e83e73b5435c1eae']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:10Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a890-47a8-42fa-b2cf-4a15950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:12.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:12.000Z",
|
|
|
|
|
"description": "Automatically added (via b0e421db43b71718af6bf06b667659642dd68bddd513b4ad62d922d1f0c09b62)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'b5917a48e0f170345f29a42f3a4eb0d8abe8806f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:12Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a892-0728-415e-813e-4b99950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:14.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:14.000Z",
|
|
|
|
|
"description": "Automatically added (via d581d7b834bff8f64cf7c1fad20430f7bc54c18ad1e08306d871ef6676cce31f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8f284841c1d9c01e22d86740746b31e5f44f0362']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:14Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a894-c1e0-4009-b32c-4595950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 73799ea1dea5d9df99cc53a79672f63aef1a25c91c718234a4145eb28564e589)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '51185aaa513ac55f444ec3589add3563c4c7d22a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a896-38d4-4ae9-84fd-4f29950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:18.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:18.000Z",
|
|
|
|
|
"description": "Automatically added (via 18fcb27f69177897f99b26e0139ebe5dc3ecafba15882a1e06a287b14ed4cb30)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c9ad006d4ac02835b5e35f5829a63ebbfb1dad9f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:18Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a898-aad8-44ae-a16f-45af950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:20.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:20.000Z",
|
|
|
|
|
"description": "Automatically added (via 49c0b9be71b0c444ed76ecc83a89cc8cb84fb916c52decc56b08756d0418a0fc)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a80feb452dadb8761e6a4e7c681a290d6f190e2e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:20Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a89a-4d08-45e6-b565-45cb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:22.000Z",
|
|
|
|
|
"description": "Automatically added (via 84359e0f5a05e716d657ec3b458cd909350c6c2ab5edd1d52c8fcbdd079210e9)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '80446d818dfe4df5e13fba173cc8cfca062ee9af']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a89c-f5c4-4c13-b351-469a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 120198b1b54cf8381283afee7c06f5e83c0503a1e99c8e63eb96fbad484c9eb0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '491fa0418bbb0b86b15b0f3b396a0647b3a763fb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a89e-c4dc-495f-b81b-412e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:26.000Z",
|
|
|
|
|
"description": "Automatically added (via cd60aa7d2d72039495f7747ec229c681c73d99bc9a79f204a39d7d463a9a9d21)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3eecd8a9da03f26f6535cc0e86d8555983b6ed93']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a0-dd68-410d-8dfe-4179950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 98d5cf98011408b9f2da202600c20e0f3ae2643d62bdc8ffb025d22cb1300589)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '07386153576f2fe112327f9cd5820559a482b7a8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a3-f92c-4c02-8a18-4104950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:31.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:31.000Z",
|
|
|
|
|
"description": "Automatically added (via bc09d80b14673f008757e321bedf5155683731a109930cc45bade75d3810e024)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8997021b59321d0e011a3f7e6a91639af5f20c59']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:31Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a5-bde0-4ae3-83d3-49cc950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:33.000Z",
|
|
|
|
|
"description": "Automatically added (via e18ded70e4534366e7793eb455d0bf7013a1971d69375aea64c3bc264fbc376c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '86552d157f19adce9d2322ed20eb1113c925ab95']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a7-24d4-488e-aa91-4d89950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:35.000Z",
|
|
|
|
|
"description": "Automatically added (via 593b37c83f59ad672a9e86e6d93c052029cc7a50b488615c11dd3e1b49e1bc6f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '571c04fac3cc172277380a7e24aa6d979b2af7de']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8a9-bba8-454c-9895-43b9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:37.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:37.000Z",
|
|
|
|
|
"description": "Automatically added (via 853085d9abcad44c467e99a47c6a2f79b9b7479aa340a76bcfd6afd38ab1d10a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8c4985f000bd6a72b876d322c2f0de0d41447229']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:37Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ab-04a0-4ab4-ba2b-4bb1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:39.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:39.000Z",
|
|
|
|
|
"description": "Automatically added (via 9281a34301476b13287400ed3debbb9fe6e2d94880b92b179ced240e33bded5b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '147974bcf632b3fbe79ecdb9c6b9db09884fd793']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:39Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ad-30d8-4dba-a26d-43d4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:41.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:41.000Z",
|
|
|
|
|
"description": "Automatically added (via c52af0a71e46e63698263bc8bcc53f4b0a307bcd250ac1bff14f4e220a1188e4)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'bd9eef9faee9835bf37958384ae1a15b8ca0aa55']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:41Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8af-ab68-4e5e-8666-4963950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:43.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:43.000Z",
|
|
|
|
|
"description": "Automatically added (via c406061e326553c2c601eb4f85e0d33fdce2a48aaf801a38657df95e3a49f669)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f689001f984d0800353ebaf023b97dd92ead8e72']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:43Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b1-3c08-43ae-88af-4a54950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:45.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:45.000Z",
|
|
|
|
|
"description": "Automatically added (via 95e06c503d163a20531516e570a3ef433bc72fd143ebb0d7b40b98508978f31f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '7d2ab0f73b20ff0f53be9333ce3adc883e78653f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:45Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b3-67e8-4e63-bfce-41be950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:47.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:47.000Z",
|
|
|
|
|
"description": "Automatically added (via 3bb54db547b7bbbb32124ce6040e3ee9ad7e796a1b58bdad7d660d9949ca9dd6)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '725ad56efab3a8ca35c59e9856c40dda2d2f4718']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:47Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b5-b204-4596-8cc1-48ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:49.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:49.000Z",
|
|
|
|
|
"description": "Automatically added (via 8a2e6027b8c58c35a074bd9cd9619f515248bd8ba5392bd7859a4ba9b1abe369)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '8663efd1bf4be71e7dbd639188b6fe273c26deab']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:49Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b7-6800-4321-93ed-403a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:51.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:51.000Z",
|
|
|
|
|
"description": "Automatically added (via 90a9a0be49520c872d0a75f22809f341691624d68ce6ff89ec660a62d0106b3a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '997fa4f8ca3d8341aa49da6dbfd869618c84ae3f']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:51Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8b9-6600-48ad-85fc-4a1d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:53.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:53.000Z",
|
|
|
|
|
"description": "Automatically added (via d6aa89a9573e9d2818ea2222d58cc663079a1da4cc5fe8c2b7f7ea97103718b5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6f5e483402c2b0f3e0c68cc2b7e8e975d57a04a6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:53Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8bb-f498-4ed8-a05d-44d9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:55.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:55.000Z",
|
|
|
|
|
"description": "Automatically added (via db46099b6046d58747bbf13b285999b3aa84a71656631ac9fcc4e2eb9ee72dba)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '42cd21ecdbd9973189e9675b65bbe442e393dac6']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:55Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8bd-1b48-4e40-98c6-4c82950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:57.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:57.000Z",
|
|
|
|
|
"description": "Automatically added (via 1cc4db1f101f261fdf9617dd1457e2505568956fd55405c19da4450c18464faf)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e077f1de85b7ae6e5ea1aaa7a7b5da873d61d458']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:57Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8bf-26f8-4f00-bcd2-4ce6950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:43:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:43:59.000Z",
|
|
|
|
|
"description": "Automatically added (via db7bff2a7fe7b45d341d4b1f5f240ea67bd2f626cf1964798b37b692f8726b85)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '004b76196f07bb89dff1179cabc547d6cbc44547']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:43:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c1-2544-4eda-ab90-42fb950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:01.000Z",
|
|
|
|
|
"description": "Automatically added (via b94cf13c9e9b55cb65bfb0b09ee7912a02434adc4bf27d804c88715152f0ddcc)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'dd6c09f05c83c67f5a45a04034820e344a8f6bb3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c3-bf38-464a-acc5-4c8d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 81082ffbda2650c1390a3d177f4b29a6abe53d838f22e8d45020c0570645f9ad)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'eef39e806fc59a319a374ba9dd15ada5e25955ab']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c5-f9bc-456b-9313-4965950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:05.000Z",
|
|
|
|
|
"description": "Automatically added (via afcbb77e7063a5386bb36713c8b1c9e3c236cf22708102d028ef6b4554089bed)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6c06e2aa0d540345e9f301c180bab670c1998cdb']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c7-e45c-464b-bc88-47f4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:07.000Z",
|
|
|
|
|
"description": "Automatically added (via 3f66a759b8cc023f5cc90d5e43887ee002beef6822867ce910e345d9105c5304)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '38d40c91aa973ccd25f36619e1ac8c829f560c53']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8c9-5a54-4b1d-b309-4a68950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:09.000Z",
|
|
|
|
|
"description": "Automatically added (via d8a96eccad3e0c85da48ff5ede2dee4aa948a1454cd8e591d5a486189cd798a7)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '321421347667037f97abde6c19a1760cb05da5d9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8cb-66e8-463e-bbbf-48c5950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:11.000Z",
|
|
|
|
|
"description": "Automatically added (via d329e95e64e57d158dd0a97ea0bb3f235f27aad158da59b9ffcf63e8e4f98c6f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2d37a5b76a8d2a49cc578bfa79635329904acb1a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8cd-f154-434d-ac5f-4c3d950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:13.000Z",
|
|
|
|
|
"description": "Automatically added (via d62ed988a6ef9bfcded580e3fbd6c5b286b831adccb84746bf620d95c298dffe)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'f760ff2fb0b13dae6d5cf33792594faf08667f6b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d0-ea00-4fe9-aa0a-4a41950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:16.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:16.000Z",
|
|
|
|
|
"description": "Automatically added (via 580c33bb18d3fd32ee11176e458a98e28094570ae57cf8f5640373618545fb54)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '318f4a5eb8cec8c8704c669b8c03539ad0e0f630']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:16Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d3-72d0-4a60-8264-48b1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 9d0d294a58e34ac6c76028c01d3730f3ef13404470ec469de0b366701832017a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0d1f46f625db1e976f5ba14828b13848d0cd7075']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d5-adf8-4c47-b4c8-4c55950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:21.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:21.000Z",
|
|
|
|
|
"description": "Automatically added (via 971374527d4406e2f93bc124a6690cd977b464a7d84e7739088e07e94b4c0aa0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '31a1eb03071bc76d620dc2b9a75164c3f6620064']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:21Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8d8-8714-4694-8826-48ea950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 51e5cdb5b15af69b2020749ec082c8835211a5313e2dde2a38504011629220f2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '04495c1c98fab51d1452d8761b9a2ca33a0c1da8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8da-9be4-4c62-9be5-4d55950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 85f5d9b9a2afc22291c7e8bbe93024ad15535a8a1bdfeae7250956794aeb3556)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '91c9fcf04c473540733cb15872e3eaa65f04ec10']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8dc-12e0-4f3d-843f-415f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:28.000Z",
|
|
|
|
|
"description": "Automatically added (via 42506dea1a2c992f0d4cceeb75009d822efb6e505d56d06285e4acd10fa82a1b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '486315abe18d21b2e1fcaf2a1b076b9f0cd4987a']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8de-cd04-4953-8643-44e9950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 359d6713e3211dcca6a6b3774413cf6621267ce4a45bc30ce045096a7d26f137)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ae94a769bce9acf06d74ee3b98f5a13b6128bcc1']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e1-5bcc-4131-8e05-457e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:33.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:33.000Z",
|
|
|
|
|
"description": "Automatically added (via 9a829f48a22c2f551cd7595fe84fa5aa51f274281dda637c4a88c79feab1f495)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '4fe46be5c37e3dcb20157847dff1e24671a93d67']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:33Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e3-ce78-468c-9177-4391950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:35.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:35.000Z",
|
|
|
|
|
"description": "Automatically added (via f6150eff4741bc12acfca5530fe8379dfd147663a7d6541f0a6a60517a834030)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'bd1ccb02ce75ad8fb45f2dcd5c33c047dab39364']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:35Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e6-c1d8-4015-bd09-459b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 9bf2d9a0848e69e1219137625c356d706e18ee89ca40d40b9bee8282d861fe9e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e07df12687f8f7468e91480b8862fa1f81156688']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8e8-3da8-482f-ba2a-4e92950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:40.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:40.000Z",
|
|
|
|
|
"description": "Automatically added (via d6a8691a7764793db847827ba81ba0a2df26176ece0876a6360fb6fab9d39579)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '3a2a7f4389c85dcfa0220b9403319011b9b077a3']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:40Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ea-d670-4381-8d01-441f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:42.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:42.000Z",
|
|
|
|
|
"description": "Automatically added (via 29f502d26d59ef2f69014d601a46808950d00892b75433359320e8ed5a282f4e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e7c0cf05f81b00779171263bdf3d11816658f278']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:42Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ec-d34c-4e2d-8168-4477950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:44.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:44.000Z",
|
|
|
|
|
"description": "Automatically added (via ee9da0114285db278b5a468a7f1dceac57c23f4b901065d8eadef0fa39dfd6db)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '0ce8fa0125e8177a3a2a8c4ec6b1313a0894fd4d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:44Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ee-3894-478d-9c31-4fba950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:46.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:46.000Z",
|
|
|
|
|
"description": "Automatically added (via 305bcc6026bbc23ee399556d04bd9e688ab2bd46b21ca0ac23d1c0934c09a6bb)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '868d6293385bb18bdd41c810e4bfb1e8c207e426']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:46Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f0-dfb8-4e40-9e26-4062950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:48.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:48.000Z",
|
|
|
|
|
"description": "Automatically added (via bd632d8f370afa1f02125b41fbbd35cb72fd8333848f2b471da2a52cd6fba1ed)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'a4542209d187a9ab2fc935961528f5176a8fbc15']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:48Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f2-ae98-4f8a-af45-4e7b950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:50.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:50.000Z",
|
|
|
|
|
"description": "Automatically added (via 23c12048e0ab7b20bda279154c673b8b4054ab5e19acbe0146564866a4f96abc)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '1744ef748516df267ed69e896cddd7ce4fb4655e']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:50Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f4-a9f4-47a6-85b7-4e36950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:52.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:52.000Z",
|
|
|
|
|
"description": "Automatically added (via f738707c76082f8c70da1c6840d1add38c4b2d946bcd919a50cb3a22111684b2)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '143ed8bf02c10a51394b3909c5455ac7ed6f6e85']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:52Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f6-f340-41e0-89d6-4ab7950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:54.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:54.000Z",
|
|
|
|
|
"description": "Automatically added (via d8b09a39b955d164a62339024415f72a79da15729bfa81b95b31fb1f95463e36)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ed908e66a7179a6ac5755a4d9f077fa358052413']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:54Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8f8-98f4-4229-8aa5-4f5f950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:56.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:56.000Z",
|
|
|
|
|
"description": "Automatically added (via 1002140275ae2e8a89bdf9c6048d763f1dd71dcce1e5d0ce22ff8a8ec20cded5)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '97bccb7276c5386664aeef92822bf358b6717977']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:56Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8fb-8a14-46b7-a4d4-4860950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:44:59.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:44:59.000Z",
|
|
|
|
|
"description": "Automatically added (via 31807918fa69c4090052a7f9ee32d9f6a1284287ce4d05afdb5cd87f9fc0dd64)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '93d0525a1922b3a5caa3351aa0ac561cd982ed07']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:44:59Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8fd-380c-4974-851d-4395950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:01.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:01.000Z",
|
|
|
|
|
"description": "Automatically added (via 659ad690a4db4490af69111e8ff5a30feaf255b0ebb70366359dc8f590cef719)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'bee7fc252b1d0f9ffa97d927d590ae84d1a3e2b2']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:01Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a8ff-4258-446d-95c8-4f45950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:03.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:03.000Z",
|
|
|
|
|
"description": "Automatically added (via 3c3d071ef44ed668063d55dda90e9ecaba44b3997da114710a9d34965c93ca36)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '99cca2ac027dafa14c5e5a56467627e3472ba956']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:03Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a901-203c-4b16-b98d-48a0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:05.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:05.000Z",
|
|
|
|
|
"description": "Automatically added (via 70d1d1d561f8a9d06c485366b789f6b6e6ba3febf90cdf4ca900ef96aa93df60)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '77815e4c058c657c67ac1a3d71421ec326a5eace']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:05Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a903-2278-4102-b489-4bd1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:07.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:07.000Z",
|
|
|
|
|
"description": "Automatically added (via f65dcc3d0bb5767a518305fd408881e98630c4ed3716c8915d61a7495f5a6971)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '6067b6b3ff2fccbc0f62b2d2ba282e761c40dfed']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:07Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a905-142c-4984-81e4-4c93950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:09.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:09.000Z",
|
|
|
|
|
"description": "Automatically added (via c4c0ff103ddf29c92ed9c550acbb3a87b728f8fd0859bb0ba7a90f2c551f955e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '27289e5f9a468d772fb086612e03e3633e68c053']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:09Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a907-7788-44f6-be2f-4004950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:11.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:11.000Z",
|
|
|
|
|
"description": "Automatically added (via 2a2b063e06e878dc2e9f63c3546370b540b9bf58c8e9946673200ffa30800aa0)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '83084d6bdbcc5f490950510906e48cb0eb3f7cd8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:11Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a909-37c4-4990-b87e-472e950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:13.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:13.000Z",
|
|
|
|
|
"description": "Automatically added (via 072c0d91dc547764ab7f5fb1181606612613b7d80dafbc8dd47150513aaa237f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '18e5aa7a5fb233a9d15a87da060ff4378d10c781']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:13Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90b-918c-4908-806a-48b1950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:15.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:15.000Z",
|
|
|
|
|
"description": "Automatically added (via c32124386277fe9e0b05ee5b3f007ddbfa669b837909ee8e4d678f513bacac1b)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '2960edc7f4d2f844da3a34e57336717cc2259ac7']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:15Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90d-52fc-4171-b7a2-4a30950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:17.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:17.000Z",
|
|
|
|
|
"description": "Automatically added (via c54ffdf658f228ffd60789fc7e81853ba6196df0a08fd97ec72969c428f70a6e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'ce56d8a4ee3e614a1529889e456c8cc24bbbc2e8']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:17Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a90f-5780-4ac6-9034-4baf950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:19.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:19.000Z",
|
|
|
|
|
"description": "Automatically added (via 4ae437aefadb6f99db28fa7d9fe099b33e8cf98513606475070d0d824541ba2c)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '74b2409d4e433d9d5ad330f267177e8c0be4e268']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:19Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a912-3970-49c3-a217-4d75950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:22.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:22.000Z",
|
|
|
|
|
"description": "Automatically added (via 880a923211231ad3f375aa58e01a6f41ee9b863fabfe4daf30de88183e20a75e)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '149e94e324e3596297477054f002d01f967d156b']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:22Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a914-8a0c-4e0f-ab85-46a2950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:24.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:24.000Z",
|
|
|
|
|
"description": "Automatically added (via 2d27fc913ce3d325476ebc1511cbe687b62568d6e4bc058eb8604857c928f12d)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e7a8382ea38d8597c42027dc3ede89fbf1ff5430']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:24Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a916-9cc0-4b3c-ace2-4b1a950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:26.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:26.000Z",
|
|
|
|
|
"description": "Automatically added (via 0024d27614933d13f0ba3c380e28558d9470861bcced22ff2be822ec098a8646)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '60502ff8fc4e92fe221ff9d42cc0d22f9aa6c17d']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:26Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a918-2e00-44f9-9637-44b4950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:28.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:28.000Z",
|
|
|
|
|
"description": "Automatically added (via aac3e54a4340549960127605eff38da1bf91531689ea35d1e750d0bf7323c321)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = '679e39354797fd8b10d196efed06f065395a1726']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:28Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91a-9d9c-4451-9e7b-4c26950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:30.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:30.000Z",
|
|
|
|
|
"description": "Automatically added (via 4174d5998ca903811426307666a9ec3c99057fe2a70611d3a6d51f239ff3f91f)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd7dd65f28d8ada66ceb12383dc9a2c4700697634']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:30Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91c-1e78-47d0-af9e-4b99950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:32.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:32.000Z",
|
|
|
|
|
"description": "Automatically added (via 7a0533bef6c2d5b3366b3c15c303f855fe31b7872447bdf3fa31683efb82b757)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c493d8bf6e4cd68725c6bc4cc26436aa1b2addcf']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:32Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a91e-8218-4343-89a8-4ae0950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:34.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:34.000Z",
|
|
|
|
|
"description": "Automatically added (via 035d8f4fe7e27f4294d0e0ac15a8d451942b6cb02395c7dcb250f8cf0d292bcf)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'd475d4a4865d8dc263fd0e18cd4a20122f10efb9']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:34Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a920-ffec-47bf-b373-49df950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:36.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:36.000Z",
|
|
|
|
|
"description": "Automatically added (via c4257d68d6677e8086800cc2269e906271dcf3c1c00c4daeb7d0c17a21583b1a)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'c7737ebec3efcede1b779a07ddd25de5d1a98875']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:36Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "indicator",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "indicator--57a8a922-6c94-4c72-a0cf-4f85950d210f",
|
|
|
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
|
|
|
"created": "2016-08-08T15:45:38.000Z",
|
|
|
|
|
"modified": "2016-08-08T15:45:38.000Z",
|
|
|
|
|
"description": "Automatically added (via 0e80bdfea3b0f07d1dae27036ffd0bd9de585e5e628e062d4b1010f7db07b7a9)",
|
|
|
|
|
"pattern": "[file:hashes.SHA1 = 'e1112f2f65f68eed931aa457ddb363acd362f31c']",
|
|
|
|
|
"pattern_type": "stix",
|
|
|
|
|
"pattern_version": "2.1",
|
|
|
|
|
"valid_from": "2016-08-08T15:45:38Z",
|
|
|
|
|
"kill_chain_phases": [
|
|
|
|
|
{
|
|
|
|
|
"kill_chain_name": "misp-category",
|
|
|
|
|
"phase_name": "Artifacts dropped"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"labels": [
|
|
|
|
|
"misp:type=\"sha1\"",
|
|
|
|
|
"misp:category=\"Artifacts dropped\"",
|
|
|
|
|
"misp:to_ids=\"True\""
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"type": "marking-definition",
|
|
|
|
|
"spec_version": "2.1",
|
|
|
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
|
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
|
|
|
"definition_type": "tlp",
|
|
|
|
|
"name": "TLP:WHITE",
|
|
|
|
|
"definition": {
|
|
|
|
|
"tlp": "white"
|
|
|
|
|
}
|
|
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
]
|
|
|
|
|
}
|
