2023-06-14 17:31:25 +00:00
{
"type" : "bundle" ,
"id" : "bundle--5a26afc4-90d8-407c-b637-4bf9950d210f" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T11:14:18.000Z" ,
"modified" : "2017-12-11T11:14:18.000Z" ,
"name" : "CIRCL" ,
"identity_class" : "organization"
} ,
{
"type" : "grouping" ,
"spec_version" : "2.1" ,
"id" : "grouping--5a26afc4-90d8-407c-b637-4bf9950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T11:14:18.000Z" ,
"modified" : "2017-12-11T11:14:18.000Z" ,
"name" : "OSINT - Mobile banking Trojan sneaks into Google Play targeting Wells Fargo, Chase and Citibank customers" ,
"context" : "suspicious-activity" ,
"object_refs" : [
"observed-data--5a26afd6-8e90-4d3b-8279-4a5c950d210f" ,
"url--5a26afd6-8e90-4d3b-8279-4a5c950d210f" ,
"x-misp-attribute--5a2e4e9c-bab4-4c9b-aaa4-d653950d210f" ,
"indicator--5a2e5acf-8040-428f-a08a-4780950d210f" ,
"indicator--5a2e5ad0-d85c-4167-bbbc-4dc9950d210f" ,
"indicator--5a2e5ad1-ccb8-4352-963b-4fc8950d210f" ,
"indicator--5a2e5ad1-d998-4e3a-8db6-4f3f950d210f" ,
"indicator--5a2e5ad2-b834-4e13-9524-42e0950d210f" ,
"indicator--5a2e5ad3-3310-432e-a3c5-4105950d210f" ,
"indicator--5a2e5ad4-d540-4761-b6b9-4d38950d210f" ,
"indicator--5a2e5ad4-8450-49af-8464-4f6f950d210f" ,
"indicator--5a2e5ad5-568c-4ebb-b649-40bf950d210f" ,
"indicator--5a2e5ad6-8a98-43ab-9e25-4f90950d210f" ,
"indicator--5a2e5ad7-0130-45fd-a5e4-43f0950d210f" ,
"indicator--5a2e5ad8-0180-4d6c-a56f-4ff0950d210f" ,
"indicator--5a2e5ad8-9774-451a-83fc-4f34950d210f" ,
"indicator--5a2e5ad9-16c4-4f59-98cc-4130950d210f" ,
"indicator--5a2e5ada-51f0-49f6-859d-4590950d210f" ,
"indicator--5a2e5ada-14f8-4054-ae64-47ab950d210f" ,
"indicator--5a2e5adb-3ee4-4bdc-b77f-4dd0950d210f" ,
"indicator--5a2e5adc-3924-49a9-895f-453b950d210f" ,
"indicator--5a2e5add-81fc-472d-a058-40e8950d210f" ,
"indicator--5a2e5add-0a44-4d53-96e2-4acf950d210f" ,
"indicator--5a2e5ade-d46c-41ac-85f4-40e0950d210f" ,
"indicator--5a2e5adf-e3e8-4f14-9bdf-4813950d210f" ,
"indicator--5a2e5ae0-f164-4fa4-8563-47f4950d210f" ,
"indicator--5a2e5ae0-a140-4f75-8392-4adb950d210f" ,
"indicator--5a2e5ae1-2328-4794-bbd1-48dc950d210f" ,
"indicator--5a2e5ae2-5f00-455c-b0bc-44c3950d210f" ,
"indicator--5a2e5ae2-dc6c-4451-9812-4090950d210f" ,
"indicator--5a2e5ae2-2b64-4ecb-9f01-402e950d210f" ,
"indicator--5a2e5ae2-97cc-4663-beba-43dd950d210f" ,
"indicator--5a2e5ae2-0020-476f-8bab-4ace950d210f" ,
"indicator--5a2e5ae2-9c30-4756-89ae-40cc950d210f" ,
"indicator--5a2e5ae2-5398-4a7e-b3fc-4b4c950d210f" ,
"indicator--5a2e5ae2-65a0-49d8-96e6-4a9a950d210f" ,
"indicator--5a2e5ae3-2b60-4a47-9758-4839950d210f" ,
"indicator--5a2e5ae3-1488-4f02-8aaf-47a9950d210f" ,
"indicator--5a2e5ae3-f2c0-4566-87bf-4594950d210f" ,
"indicator--5a2e5ae3-00c4-438f-b6ee-4805950d210f" ,
"indicator--5a2e5ae3-83f8-4ef6-85ad-4f4c950d210f" ,
"indicator--5a2e5ae3-37c0-45ea-8598-4704950d210f" ,
"indicator--5a2e5ae3-2df0-45cd-8eb3-45f0950d210f" ,
"indicator--5a2e5ae3-f928-4ddf-a0c4-4e63950d210f" ,
"indicator--5a2e5ae3-7078-4e85-ba82-4329950d210f" ,
"indicator--5a2e5ae3-d120-4f42-946a-4a78950d210f" ,
"indicator--5a2e5ae3-9c24-4a91-8769-43e6950d210f" ,
"indicator--5a2e5ae3-85e8-45e6-b20f-47a6950d210f" ,
"indicator--5a2e5ae3-0220-4645-b676-49ef950d210f" ,
"indicator--5a2e5ae3-4378-4a54-ad7e-4a37950d210f" ,
"indicator--5a2e5ae3-4480-43c6-9c92-4f9a950d210f" ,
"indicator--5a2e5ae3-03a0-4e1c-b571-4d95950d210f" ,
"indicator--5a2e5ae3-d66c-4c4c-87bd-4f8e950d210f" ,
"indicator--5a2e5ae3-bc9c-406e-9365-4fe1950d210f" ,
"indicator--5a2e5ae3-1cc8-4d9a-959c-48c1950d210f" ,
"indicator--5a2e5ae3-ae98-4d6a-b71d-4f5d950d210f" ,
"indicator--5a2e5ae3-f75c-4330-9c52-48cf950d210f" ,
"indicator--5a2e5ae3-3788-43c3-9e47-4d31950d210f" ,
"indicator--5a2e5ae3-eeb4-4edc-9b65-4dcf950d210f" ,
"indicator--5a2e5ae3-7850-4936-944d-46ae950d210f" ,
"indicator--5a2e5ae3-8d44-4d96-a29a-443e950d210f" ,
"indicator--5a2e5ae3-4e10-4ce2-a8d8-4d88950d210f" ,
"indicator--5a2e5ae3-d1d0-4186-9494-4d9c950d210f" ,
"indicator--5a2e5ae3-eeb0-407c-923c-4484950d210f" ,
"indicator--5a2e5ae3-7ac8-407b-8cd4-48d6950d210f" ,
"indicator--5a2e5ae3-edfc-4a18-9f84-4bfe950d210f" ,
"indicator--5a2e5ae3-6044-40dc-81f1-4773950d210f" ,
"indicator--5a2e5ae3-fe78-45d2-ace9-4f3c950d210f" ,
"indicator--5a2e5ae3-e0b8-4bc0-9bdc-417d950d210f" ,
"indicator--5a2e5ae3-b624-413a-9836-445c950d210f" ,
"indicator--5a2e5ae3-c7f4-45d7-bcbd-4fe3950d210f" ,
"indicator--5a2e5ae3-1588-415e-9439-4ac6950d210f" ,
"indicator--5a2e5ae4-1bac-4e5b-974e-45e4950d210f" ,
"indicator--5a2e5ae4-39ec-4ecb-abd1-4c76950d210f" ,
"indicator--5a2e5ae5-67b0-4cce-a3c4-4e62950d210f" ,
"indicator--5a2e5ae6-8e98-4fd6-9ab8-4ed5950d210f" ,
"indicator--5a2e5ae7-e7b0-41e7-94ae-4175950d210f" ,
"indicator--5a2e5ae7-57ec-4dc2-9124-4840950d210f" ,
"indicator--5a2e5ae8-9188-429a-82b3-4804950d210f" ,
"indicator--5a2e5ae9-79f8-4724-bffd-49a9950d210f" ,
"indicator--5a2e5ae9-0bc0-4ea8-9d2b-4a9b950d210f" ,
"indicator--5a2e5aea-1b54-41a5-abec-4c68950d210f" ,
"indicator--5a2e5aeb-b328-4c61-a0b3-4c94950d210f" ,
"indicator--5a2e5aec-e9a8-4fe4-8785-47e9950d210f" ,
"indicator--5a2e5aec-62bc-4ca4-bb67-4faf950d210f" ,
"indicator--5a2e5aed-9684-4d20-8b38-4150950d210f" ,
"indicator--5a2e5aee-cf24-4faa-a625-4470950d210f" ,
"indicator--5a2e5aef-3270-4030-ac83-4d05950d210f" ,
"indicator--5a2e5af0-41e0-4368-b4ac-4b35950d210f" ,
"indicator--5a2e5af0-746c-4f9a-8766-4d01950d210f" ,
"indicator--5a2e5af1-c4a0-447e-8a4d-4c6a950d210f" ,
"indicator--5a2e5af2-de68-4596-9ded-46a2950d210f" ,
"indicator--5a2e5af2-01c4-4a68-b32d-4888950d210f" ,
"indicator--5a2e5af3-65f4-47ee-ad2f-418f950d210f" ,
"indicator--5a2e5af4-7724-4179-94ab-47de950d210f" ,
"indicator--5a2e5af5-9628-46f9-b013-4b38950d210f" ,
"indicator--5a2e5af5-01b8-48ca-8869-4c40950d210f" ,
"indicator--5a2e5af6-50cc-4c5f-a6ad-4218950d210f" ,
"indicator--5a2e5af7-ca84-462b-baa4-4751950d210f" ,
"indicator--5a2e5af7-54a4-400a-8aad-4f3e950d210f" ,
"indicator--5a2e5af7-e948-4725-8c04-4ec5950d210f" ,
"indicator--5a2e5af7-3f08-43f4-a2ec-4094950d210f" ,
"indicator--5a2e5af7-4170-401c-8d82-4372950d210f" ,
"indicator--5a2e5af8-adf0-4860-b44d-497e950d210f" ,
"indicator--5a2e5af8-8780-4a86-972f-4a4d950d210f" ,
"indicator--5a2e5b3b-e6e4-4cbc-92c2-4960950d210f" ,
"indicator--5a2e5b3b-0694-4e08-9443-4200950d210f" ,
"indicator--5a2e5b3c-5398-4444-bca0-43ab950d210f" ,
"indicator--5a2e5b3d-1fec-478b-8888-4256950d210f" ,
"indicator--5a2e5b3e-2ebc-4707-831a-4a9b950d210f" ,
"indicator--5a2e5b3f-5f10-4f2b-9c4e-42a7950d210f" ,
"indicator--5a2e5b3f-1dd8-4931-87eb-4170950d210f" ,
"indicator--5a2e5b40-7818-4a54-8c34-419e950d210f" ,
"indicator--5a2e5b41-58e8-431d-9992-4a08950d210f" ,
"indicator--5a2e5b41-b7a0-4e77-81d2-4acb950d210f" ,
"indicator--5a2e5b42-2ea4-4b59-9399-4519950d210f" ,
"indicator--5a2e5b43-ea74-4c30-82fc-45fa950d210f" ,
"indicator--5a2e5b44-0c6c-4ff7-bcf1-413c950d210f" ,
"indicator--5a2e5b44-4d10-472f-b727-4b49950d210f" ,
"indicator--5a2e5b45-f8f0-4a54-93e9-4da5950d210f" ,
"indicator--5a2e5b46-91e0-4d3a-96a5-4560950d210f" ,
"indicator--5a2e5b47-bf64-40bc-8680-403f950d210f" ,
"indicator--5a2e5b47-3de0-44d2-bd0a-42fa950d210f" ,
"indicator--5a2e5b48-91c4-4f5e-b936-48b8950d210f" ,
"indicator--5a2e5b49-9098-409e-bae6-4240950d210f" ,
"indicator--5a2e5b4a-98e8-4880-be1d-4edc950d210f" ,
"indicator--5a2e5b4a-edbc-486e-bcb9-42d4950d210f" ,
"indicator--5a2e5b4b-7d78-458d-b10a-4941950d210f" ,
"indicator--5a2e5b4c-b294-4ed8-ad6c-47a4950d210f" ,
"indicator--5a2e5b4d-39b4-4b7a-8afd-49f8950d210f" ,
"indicator--5a2e5b4d-bcf8-4001-8c50-49cf950d210f" ,
"indicator--5a2e5b4e-fb38-4378-b8c5-4987950d210f" ,
"observed-data--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"file--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"observed-data--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"file--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"artifact--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"observed-data--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"file--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"artifact--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"observed-data--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"file--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"observed-data--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"file--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"observed-data--5a2e628f-6938-4458-90b3-407b950d210f" ,
"file--5a2e628f-6938-4458-90b3-407b950d210f" ,
"artifact--5a2e628f-6938-4458-90b3-407b950d210f" ,
"observed-data--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"file--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"workflow:state=\"incomplete\"" ,
"type:OSINT" ,
"Android Malware" ,
"ms-caro-malware:malware-platform=\"AndroidOS\"" ,
"ms-caro-malware-full:malware-platform=\"AndroidOS\"" ,
"workflow:todo=\"expansion\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a26afd6-8e90-4d3b-8279-4a5c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-05T14:40:28.000Z" ,
"modified" : "2017-12-05T14:40:28.000Z" ,
"first_observed" : "2017-12-05T14:40:28Z" ,
"last_observed" : "2017-12-05T14:40:28Z" ,
"number_observed" : 1 ,
"object_refs" : [
"url--5a26afd6-8e90-4d3b-8279-4a5c950d210f"
] ,
"labels" : [
"misp:type=\"link\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
]
} ,
{
"type" : "url" ,
"spec_version" : "2.1" ,
"id" : "url--5a26afd6-8e90-4d3b-8279-4a5c950d210f" ,
"value" : "https://blog.avast.com/mobile-banking-trojan-sneaks-into-google-play-targeting-wells-fargo-chase-and-citibank-customers"
} ,
{
"type" : "x-misp-attribute" ,
"spec_version" : "2.1" ,
"id" : "x-misp-attribute--5a2e4e9c-bab4-4c9b-aaa4-d653950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T09:23:47.000Z" ,
"modified" : "2017-12-11T09:23:47.000Z" ,
"labels" : [
"misp:type=\"comment\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
] ,
"x_misp_category" : "External analysis" ,
"x_misp_type" : "comment" ,
"x_misp_value" : "The new version of BankBot has been hiding in apps that pose as supposedly trustworthy flashlight apps, tricking users into downloading them, in a first campaign. In a second campaign, the solitaire games and a cleaner app have been dropping additional kinds of malware besides BankBot, called Mazar and Red Alert (Mazar was recently described by ESET and we won\u2019t dive into the details here). However, instead of bringing light, joy and convenience into their users\u2019 lives, the dark intention of these apps has been to spy on users, collect their bank login details and steal their money."
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5acf-8040-428f-a08a-4780950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:43.000Z" ,
"modified" : "2017-12-11T10:15:43.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'ar.nbad.emobile.android.mobilebank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:43Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad0-d85c-4167-bbbc-4dc9950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:44.000Z" ,
"modified" : "2017-12-11T10:15:44.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'at.bawag.mbanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:44Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad1-ccb8-4352-963b-4fc8950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:45.000Z" ,
"modified" : "2017-12-11T10:15:45.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'at.spardat.bcrmobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:45Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad1-d998-4e3a-8db6-4f3f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:45.000Z" ,
"modified" : "2017-12-11T10:15:45.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'at.spardat.netbanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:45Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad2-b834-4e13-9524-42e0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:46.000Z" ,
"modified" : "2017-12-11T10:15:46.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.bankwest.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:46Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad3-3310-432e-a3c5-4105950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:47.000Z" ,
"modified" : "2017-12-11T10:15:47.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.cua.mb']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:47Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad4-d540-4761-b6b9-4d38950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:48.000Z" ,
"modified" : "2017-12-11T10:15:48.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.nab.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:48Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad4-8450-49af-8464-4f6f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:48.000Z" ,
"modified" : "2017-12-11T10:15:48.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.newcastlepermanent']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:48Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad5-568c-4ebb-b649-40bf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:49.000Z" ,
"modified" : "2017-12-11T10:15:49.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.suncorp.SuncorpBank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:49Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad6-8a98-43ab-9e25-4f90950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:50.000Z" ,
"modified" : "2017-12-11T10:15:50.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.EurobankEFG']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:50Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad7-0130-45fd-a5e4-43f0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:51.000Z" ,
"modified" : "2017-12-11T10:15:51.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.adib.mbs']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:51Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad8-0180-4d6c-a56f-4ff0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:52.000Z" ,
"modified" : "2017-12-11T10:15:52.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.advantage.RaiffeisenBank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:52Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad8-9774-451a-83fc-4f34950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:52.000Z" ,
"modified" : "2017-12-11T10:15:52.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.anz.SingaporeDigitalBanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:52Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ad9-16c4-4f59-98cc-4130950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:53.000Z" ,
"modified" : "2017-12-11T10:15:53.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bankaustria.android.olb']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:53Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ada-51f0-49f6-859d-4590950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:54.000Z" ,
"modified" : "2017-12-11T10:15:54.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bankofqueensland.boq']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:54Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ada-14f8-4054-ae64-47ab950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:54.000Z" ,
"modified" : "2017-12-11T10:15:54.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.barclays.ke.mobile.android.ui']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:54Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5adb-3ee4-4bdc-b77f-4dd0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:55.000Z" ,
"modified" : "2017-12-11T10:15:55.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bbva.bbvacontigo']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:55Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5adc-3924-49a9-895f-453b950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:56.000Z" ,
"modified" : "2017-12-11T10:15:56.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bbva.netcash']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:56Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5add-81fc-472d-a058-40e8950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:57.000Z" ,
"modified" : "2017-12-11T10:15:57.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bendigobank.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:57Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5add-0a44-4d53-96e2-4acf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:57.000Z" ,
"modified" : "2017-12-11T10:15:57.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.bmo.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:57Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ade-d46c-41ac-85f4-40e0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:58.000Z" ,
"modified" : "2017-12-11T10:15:58.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.caisseepargne.android.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:58Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5adf-e3e8-4f14-9bdf-4813950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:15:59.000Z" ,
"modified" : "2017-12-11T10:15:59.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.cajamar.Cajamar']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:15:59Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae0-f164-4fa4-8563-47f4950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:00.000Z" ,
"modified" : "2017-12-11T10:16:00.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.cbd.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:00Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae0-a140-4f75-8392-4adb950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:00.000Z" ,
"modified" : "2017-12-11T10:16:00.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.clairmail.fth']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:00Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae1-2328-4794-bbd1-48dc950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:01.000Z" ,
"modified" : "2017-12-11T10:16:01.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.cm_prod.bad']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:01Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-5f00-455c-b0bc-44c3950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.comarch.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-dc6c-4451-9812-4090950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.csam.icici.bank.imobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-2b64-4ecb-9f01-402e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.csg.cs.dnmb']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-97cc-4663-beba-43dd950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.db.mm.deutschebank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-0020-476f-8bab-4ace950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.db.mm.norisbank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-9c30-4756-89ae-40cc950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.finansbank.mobile.cepsube']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-5398-4a7e-b3fc-4b4c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.garanti.cepsubesi']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae2-65a0-49d8-96e6-4a9a950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:02.000Z" ,
"modified" : "2017-12-11T10:16:02.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.getingroup.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:02Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-2b60-4a47-9758-4839950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.htsu.hsbcpersonalbanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-1488-4f02-8aaf-47a9950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.imb.banking2']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-f2c0-4566-87bf-4594950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.infonow.bofa']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-00c4-438f-b6ee-4805950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.ing.diba.mbbr2']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-83f8-4ef6-85ad-4f4c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.ing.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-37c0-45ea-8598-4704950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.konylabs.capitalone']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-2df0-45cd-8eb3-45f0950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.mobileloft.alpha.droid']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-f928-4ddf-a0c4-4e63950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.moneybookers.skrillpayments']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-7078-4e85-ba82-4329950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.moneybookers.skrillpayments.neteller']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-d120-4f42-946a-4a78950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.pozitron.iscep']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-9c24-4a91-8769-43e6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.rak']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-85e8-45e6-b20f-47a6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.rsi']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-0220-4645-b676-49ef950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.sbi.SBIFreedomPlus']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-4378-4a54-ad7e-4a37950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.snapwork.hdfc']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-4480-43c6-9c92-4f9a950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.starfinanz.smob.android.sfinanzstatus']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-03a0-4e1c-b571-4d95950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.suntrust.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-d66c-4c4c-87bd-4f8e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.targo_prod.bad']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-bc9c-406e-9365-4fe1950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.tmobtech.halkbank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-1cc8-4d9a-959c-48c1950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.unicredit']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-ae98-4d6a-b71d-4f5d950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.usaa.mobile.android.usaa']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-f75c-4330-9c52-48cf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.usbank.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-3788-43c3-9e47-4d31950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.vakifbank.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-eeb4-4edc-9b65-4dcf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.vipera.ts.starter.FGB']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-7850-4936-944d-46ae950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.vipera.ts.starter.MashreqAE']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-8d44-4d96-a29a-443e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.wf.wellsfargomobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-4e10-4ce2-a8d8-4d88950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.ziraat.ziraatmobil']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-d1d0-4186-9494-4d9c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'cz.csob.smartbanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-eeb0-407c-923c-4484950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'cz.sberbankcz']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-7ac8-407b-8cd4-48d6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.commerzbanking.mobil']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-edfc-4a18-9f84-4bfe950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.direkt1822.banking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-6044-40dc-81f1-4773950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.dkb.portalapp']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-fe78-45d2-ace9-4f3c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.fiducia.smartphone.android.banking.vr']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-e0b8-4bc0-9bdc-417d950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.postbank.finanzassistent']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-b624-413a-9836-445c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'enbd.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-c7f4-45d7-bcbd-4fe3950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'es.bancosantander.apps']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae3-1588-415e-9439-4ac6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:03.000Z" ,
"modified" : "2017-12-11T10:16:03.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'es.ibercaja.ibercajaapp']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae4-1bac-4e5b-974e-45e4950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:04.000Z" ,
"modified" : "2017-12-11T10:16:04.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'es.lacaixa.mobile.android.newwapicon']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:04Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae4-39ec-4ecb-abd1-4c76950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:04.000Z" ,
"modified" : "2017-12-11T10:16:04.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'es.univia.unicajamovil']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:04Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae5-67b0-4cce-a3c4-4e62950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:05.000Z" ,
"modified" : "2017-12-11T10:16:05.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'eu.eleader.mobilebanking.pekao']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:05Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae6-8e98-4fd6-9ab8-4ed5950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:06.000Z" ,
"modified" : "2017-12-11T10:16:06.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'eu.eleader.mobilebanking.pekao.firm']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:06Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae7-e7b0-41e7-94ae-4175950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:07.000Z" ,
"modified" : "2017-12-11T10:16:07.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'eu.inmite.prj.kb.mobilbank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:07Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae7-57ec-4dc2-9124-4840950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:07.000Z" ,
"modified" : "2017-12-11T10:16:07.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'eu.unicreditgroup.hvbapptan']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:07Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae8-9188-429a-82b3-4804950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:08.000Z" ,
"modified" : "2017-12-11T10:16:08.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'fr.banquepopulaire.cyberplus']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:08Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae9-79f8-4724-bffd-49a9950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:09.000Z" ,
"modified" : "2017-12-11T10:16:09.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'fr.creditagricole.androidapp']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:09Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5ae9-0bc0-4ea8-9d2b-4a9b950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:09.000Z" ,
"modified" : "2017-12-11T10:16:09.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'fr.laposte.lapostemobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:09Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aea-1b54-41a5-abec-4c68950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:10.000Z" ,
"modified" : "2017-12-11T10:16:10.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'fr.lcl.android.customerarea']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:10Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aeb-b328-4c61-a0b3-4c94950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:11.000Z" ,
"modified" : "2017-12-11T10:16:11.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'gr.winbank.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:11Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aec-e9a8-4fe4-8785-47e9950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:12.000Z" ,
"modified" : "2017-12-11T10:16:12.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'in.co.bankofbaroda.mpassbook']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:12Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aec-62bc-4ca4-bb67-4faf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:12.000Z" ,
"modified" : "2017-12-11T10:16:12.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'mbanking.NBG']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:12Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aed-9684-4d20-8b38-4150950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:13.000Z" ,
"modified" : "2017-12-11T10:16:13.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'mobi.societegenerale.mobile.lappli']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:13Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aee-cf24-4faa-a625-4470950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:14.000Z" ,
"modified" : "2017-12-11T10:16:14.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'net.bnpparibas.mescomptes']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:14Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5aef-3270-4030-ac83-4d05950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:15.000Z" ,
"modified" : "2017-12-11T10:16:15.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'nz.co.anz.android.mobilebanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:15Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af0-41e0-4368-b4ac-4b35950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:16.000Z" ,
"modified" : "2017-12-11T10:16:16.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'nz.co.asb.asbmobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:16Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af0-746c-4f9a-8766-4d01950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:16.000Z" ,
"modified" : "2017-12-11T10:16:16.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'nz.co.bnz.droidbanking']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:16Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af1-c4a0-447e-8a4d-4c6a950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:17.000Z" ,
"modified" : "2017-12-11T10:16:17.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'nz.co.kiwibank.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:17Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af2-de68-4596-9ded-46a2950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:18.000Z" ,
"modified" : "2017-12-11T10:16:18.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'nz.co.westpac']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:18Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af2-01c4-4a68-b32d-4888950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:18.000Z" ,
"modified" : "2017-12-11T10:16:18.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pl.bzwbk.bzwbk24']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:18Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af3-65f4-47ee-ad2f-418f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:19.000Z" ,
"modified" : "2017-12-11T10:16:19.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pl.bzwbk.ibiznes24']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:19Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af4-7724-4179-94ab-47de950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:20.000Z" ,
"modified" : "2017-12-11T10:16:20.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pl.ipko.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:20Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af5-9628-46f9-b013-4b38950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:21.000Z" ,
"modified" : "2017-12-11T10:16:21.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pl.mbank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:21Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af5-01b8-48ca-8869-4c40950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:21.000Z" ,
"modified" : "2017-12-11T10:16:21.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pt.bancobpi.mobile.fiabilizacao']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:21Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af6-50cc-4c5f-a6ad-4218950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:22.000Z" ,
"modified" : "2017-12-11T10:16:22.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pt.cgd.caixadirecta']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:22Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af7-ca84-462b-baa4-4751950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:23.000Z" ,
"modified" : "2017-12-11T10:16:23.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'pt.novobanco.nbapp']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:23Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af7-54a4-400a-8aad-4f3e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:23.000Z" ,
"modified" : "2017-12-11T10:16:23.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'ro.btrl.mobile']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:23Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af7-e948-4725-8c04-4ec5950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:23.000Z" ,
"modified" : "2017-12-11T10:16:23.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'src.com.idbi']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:23Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af7-3f08-43f4-a2ec-4094950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:23.000Z" ,
"modified" : "2017-12-11T10:16:23.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'wit.android.bcpBankingApp.activoBank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:23Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af7-4170-401c-8d82-4372950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:23.000Z" ,
"modified" : "2017-12-11T10:16:23.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'wit.android.bcpBankingApp.millennium']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:23Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af8-adf0-4860-b44d-497e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:24.000Z" ,
"modified" : "2017-12-11T10:16:24.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'wit.android.bcpBankingApp.millenniumPL']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:24Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5af8-8780-4a86-972f-4a4d950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:16:24.000Z" ,
"modified" : "2017-12-11T10:16:24.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'www.ingdirect.nativeframe']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:16:24Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3b-e6e4-4cbc-92c2-4960950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:31.000Z" ,
"modified" : "2017-12-11T10:17:31.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'au.com.ingdirect.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:31Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3b-0694-4e08-9443-4200950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:31.000Z" ,
"modified" : "2017-12-11T10:17:31.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'ch.raiffeisen.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:31Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3c-5398-4444-bca0-43ab950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:32.000Z" ,
"modified" : "2017-12-11T10:17:32.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.adcb.bank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:32Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3d-1fec-478b-8888-4256950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:33.000Z" ,
"modified" : "2017-12-11T10:17:33.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.dib.app']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:33Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3e-2ebc-4707-831a-4a9b950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:34.000Z" ,
"modified" : "2017-12-11T10:17:34.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.cibc.android.mobi']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:34Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3f-5f10-4f2b-9c4e-42a7950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:35.000Z" ,
"modified" : "2017-12-11T10:17:35.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.chase.sig.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:35Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b3f-1dd8-4931-87eb-4170950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:35.000Z" ,
"modified" : "2017-12-11T10:17:35.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.commbank.netbank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:35Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b40-7818-4a54-8c34-419e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:36.000Z" ,
"modified" : "2017-12-11T10:17:36.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.comarch.mobile.banking.bnpparibas']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:36Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b41-58e8-431d-9992-4a08950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:37.000Z" ,
"modified" : "2017-12-11T10:17:37.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.citibank.mobile.au']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:37Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b41-b7a0-4e77-81d2-4acb950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:37.000Z" ,
"modified" : "2017-12-11T10:17:37.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.finanteq.finance.ca']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:37Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b42-2ea4-4b59-9399-4519950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:38.000Z" ,
"modified" : "2017-12-11T10:17:38.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'hr.asseco.android.jimba.mUCI.ro']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:38Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b43-ea74-4c30-82fc-45fa950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:39.000Z" ,
"modified" : "2017-12-11T10:17:39.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.unionbank.ecommerce.mobile.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:39Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b44-0c6c-4ff7-bcf1-413c950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:40.000Z" ,
"modified" : "2017-12-11T10:17:40.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.scb.breezebanking.hk']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:40Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b44-4d10-472f-b727-4b49950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:40.000Z" ,
"modified" : "2017-12-11T10:17:40.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'cz.airbank.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:40Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b45-f8f0-4a54-93e9-4da5950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:41.000Z" ,
"modified" : "2017-12-11T10:17:41.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.ykb.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:41Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b46-91e0-4d3a-96a5-4560950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:42.000Z" ,
"modified" : "2017-12-11T10:17:42.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.ubs.swidKXJ.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:42Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b47-bf64-40bc-8680-403f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:43.000Z" ,
"modified" : "2017-12-11T10:17:43.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.comdirect.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:43Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b47-3de0-44d2-bd0a-42fa950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:43.000Z" ,
"modified" : "2017-12-11T10:17:43.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'es.cm.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:43Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b48-91c4-4f5e-b936-48b8950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:44.000Z" ,
"modified" : "2017-12-11T10:17:44.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'may.maybank.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:44Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b49-9098-409e-bae6-4240950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:45.000Z" ,
"modified" : "2017-12-11T10:17:45.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'de.sdvrz.ihb.mobile.app']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:45Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4a-98e8-4880-be1d-4edc950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:46.000Z" ,
"modified" : "2017-12-11T10:17:46.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'mobile.santander.de']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:46Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4a-edbc-486e-bcb9-42d4950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:46.000Z" ,
"modified" : "2017-12-11T10:17:46.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'com.palatine.android.mobilebanking.prod']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:46Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4b-7d78-458d-b10a-4941950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:47.000Z" ,
"modified" : "2017-12-11T10:17:47.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'org.stgeorge.bank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:47Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4c-b294-4ed8-ad6c-47a4950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:48.000Z" ,
"modified" : "2017-12-11T10:17:48.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'org.banksa.bank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:48Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4d-39b4-4b7a-8afd-49f8950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:49.000Z" ,
"modified" : "2017-12-11T10:17:49.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'net.inverline.bancosabadell.officelocator.android']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:49Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4d-bcf8-4001-8c50-49cf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:49.000Z" ,
"modified" : "2017-12-11T10:17:49.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'org.westpac.bank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:49Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5a2e5b4e-fb38-4378-b8c5-4987950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:17:50.000Z" ,
"modified" : "2017-12-11T10:17:50.000Z" ,
"description" : "Targeted Apps" ,
"pattern" : "[file:name = 'org.bom.bank']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2017-12-11T10:17:50Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:49:54.000Z" ,
"modified" : "2017-12-11T10:49:54.000Z" ,
"first_observed" : "2017-12-11T10:49:54Z" ,
"last_observed" : "2017-12-11T10:49:54Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"name" : "Section1Chart1.jpg" ,
"content_ref" : "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q E A k A C Q A A D / 4 R D 6 R X h p Z g A A T U 0 A K g A A A A g A B A E 7 A A I A A A A Q A A A I S o d p A A Q A A A A B A A A I W p y d A A E A A A A g A A A Q 0 u o c A A c A A A g M A A A A P g A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E V t c G V 5 I E N o Y X J s b 3 R 0 Z Q A A B Z A D A A I A A A A U A A A Q q J A E A A I A A A A U A A A Q v J K R A A I A A A A D O T M A A J K S A A I A A A A D O T M A A O o c A A c A A A g M A A A I n A A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:51:39.000Z" ,
"modified" : "2017-12-11T10:51:39.000Z" ,
"first_observed" : "2017-12-11T10:51:39Z" ,
"last_observed" : "2017-12-11T10:51:39Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"artifact--5a2e60cd-1968-41fc-98db-4df5950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"name" : "Section1Chart2.jpg" ,
"content_ref" : "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A g A A A Q A B A A D / 2 w B D A A I B A Q E B A Q I B A Q E C A g I C A g Q D A g I C A g U E B A M E B g U G B g Y F B g Y G B w k I B g c J B w Y G C A s I C Q o K C g o K B g g L D A s K D A k K C g r / 2 w B D A Q I C A g I C A g U D A w U K B w Y H C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g r / w g A R C A B 2 A 7 I D A S I A A h E B A x E B / 8 Q A H A A B A A M B A Q E B A Q A A A A A A A A A A A A Y H C A U E A w I B / 8 Q A G Q E B A Q E B A Q E A A A A A A A A A A A A A A A E C A w Q F / 9 o A D A M B A A I Q A x A A A A H T f C a A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / x 7 U O f w 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z / H d R Z + P 60 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M / t A D P 7 Q A z + 0 A M 2 L S E A a A G f 2 g B n 9 o A Z / a A G f 2 g B n / u 3 H n 80 A D P 8 A o D P + g A A A A A A A A A A C o u V x q 0 N S 86 l / s X D H q / 7 J I + x S H 3 N B z W o L f A A A A A A A A A G f 9 A Z / N A A p C T 1 V 6 S 9 / j k + 0 i e 9 v I v S N a / z O 1 W m 3 K 8 j f r L C 9 u Y P M a v 8 A h R k J N Y 9 z K d t l r Z + 0 D n 40 C A A A A B T 1 r 0 a W F 1 s 1 / A u a w a D u 8 q W f Z / 7 h d U Z g N c m s P p w u e W 8 A A A A C v g W C B 5 f V E i C / b 5 c 8 m t g 1 T a w A z / o D P 5 o A G f 8 A Q G b b R L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B V 8 J B + 44 J h 8 o o O / w A j z j u / e N i a + y v h Y K v h Y K v h Y K v h Y K v h Y K v h Y K v h Y K v h Y K v h Y K v h Y O f 5 / R x r J X w m H x i o k X z 4 I k P m 444 H Y + 4 k n p i Q l f M 44 k / 4 j Y k H Z g w s H P 1 g U c a y V 8 L B V 8 L B V 8 L B V 8 L B V 8 L B i / G E y 5 P D E o 6 E H H U 7 M S E k 6 M K E q + 0 P F g q + F g q + F g q + F g q + F g q + B B B f i v h Y K v h 1 / w B 8 U d y S 18 L B V 8 L B z / P 6 u N J A z b a M A 0 A V 8 k E h K + S 0 R J M P y R F I f c R B L v 4 R J 35 E V 8 k H q I q 9 X Y I 6 k n d K + S D 7 E Z S / x E d T L 7 E H d f 2 E c W D D D w u 39 i P J B I S v k i 9 h E U t / R E E j / B H 0 g k J X y X C I p h z j g J H 9 S L p r 7 C v q O 1 l n 8 n 6 w R X y w R X y w R X y w R X y Y d E r 5 Y I r 5 Y I r 5 M O i V 8 m n t K + o 7 W W f i w F g x w 4 K w Y 8 R 9 P e I R 1 Y P O I e k P d I C l v U K + S D + k e S v 9 k R S 3 q F f J B 2 C D p 7 w y P O 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:49:41.000Z" ,
"modified" : "2017-12-11T10:49:41.000Z" ,
"first_observed" : "2017-12-11T10:49:41Z" ,
"last_observed" : "2017-12-11T10:49:41Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"artifact--5a2e611d-f250-46fc-a644-44bf950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"name" : "Section2Chart1.jpg" ,
"content_ref" : "artifact--5a2e611d-f250-46fc-a644-44bf950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e611d-f250-46fc-a644-44bf950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q E A k A C Q A A D / 4 R D 6 R X h p Z g A A T U 0 A K g A A A A g A B A E 7 A A I A A A A Q A A A I S o d p A A Q A A A A B A A A I W p y d A A E A A A A g A A A Q 0 u o c A A c A A A g M A A A A P g A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E V t c G V 5 I E N o Y X J s b 3 R 0 Z Q A A B Z A D A A I A A A A U A A A Q q J A E A A I A A A A U A A A Q v J K R A A I A A A A D N j M A A J K S A A I A A A A D N j M A A O o c A A c A A A g M A A A I n A A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:50:14.000Z" ,
"modified" : "2017-12-11T10:50:14.000Z" ,
"first_observed" : "2017-12-11T10:50:14Z" ,
"last_observed" : "2017-12-11T10:50:14Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"name" : "Section3.jpg" ,
"content_ref" : "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A g A A A Q A B A A D / 2 w B D A A I B A Q E B A Q I B A Q E C A g I C A g Q D A g I C A g U E B A M E B g U G B g Y F B g Y G B w k I B g c J B w Y G C A s I C Q o K C g o K B g g L D A s K D A k K C g r / 2 w B D A Q I C A g I C A g U D A w U K B w Y H C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g r / w g A R C A C H A 7 A D A S I A A h E B A x E B / 8 Q A H A A B A Q A D A Q E B A Q A A A A A A A A A A A A g F B g c E A w I B / 8 Q A G Q E B A Q E B A Q E A A A A A A A A A A A A A A A E C A w Q F / 9 o A D A M B A A I Q A x A A A A H v f 7 U A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A R / 0 B Q B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P + g V / P 4 U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J A 39 Q B P 6 g B P 8 A + K D n 8 U B P 9 A A A A A A A A A A A D h 3 c e V H z 1 H w Z w / P 25 F v J 7 / F r f V j A 7 V x j p x 3 M A A A A A A A A A A E / 0 B P 9 A D k f X O M G B 2 H Z Z j K V 1 H H 6 o d f / A L z L S D u X 0 0 P Q i x O A d v n 827 P c Y 8 x 17 L 4 D n h 3 D o c 70 Q J / o C f y g A A A A A A O H d x n 82 v 38 p 955 a E m 6 j C a t v 1 P 7 m 14 j O a Y d 21 H y f c 7 E A A A A A C f 6 A n + g D l n y 8 v 5 O y T / Q E / i g J / o A A A A A A A A A A A A A A A A A A A A A A A A A A A n + g J / o A A A A Y P O D m v S g A A A A T / Q E / l A A A A A A A A A A A A A A A A A A A n + g J / o A w e H 9 H N j u s / 0 B P 4 o C f 6 A A A A A A A A A A A A A A A A A A A A A A A A A A A J / o C f 6 A A A A A A A A A A E / 0 B P 5 Q A A A A A A A A A A A A A A A A A A J / o C f 6 A O f O g h P 9 A T + a 7 s S g C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C H + w K A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / U A J / 4 / c E / h Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A h / s C g C f 1 A C f 9 d q K f x Q E / 0 A T h t v r 56 Y L P 7 f o J 0 u e u v a u d V 4 N 1 v C G u 5 z K f M 0 v c M H n D L 6 T 6 t n N q 5 x 4 s c b B z v s m r m e 2 H S c M b 3 p e V 8 R 1 H m e z e U 1 T y + z b T T f v 5 d s M H 6 / F 0 U y E 6 d O / h r + m 9 p 1 w 8 X 4 z G S P J / c N m j V s B v 31 M n k v V 9 j k X l 7 P z k + / r 23 w G P 1 v N / A 4 Z u m 2 b c d L 2 D T d y J / w C q c q 3 M 8 P i 1 D G Y 9 O 2 b N z T c G d 71 j C a Y u 2 f L G 4 N a Y 49 m d a T a / t y r F G d 6 j y M v Q P p y 7 d W d w 1 D V f w 1 W s / w D f + A b 81 A S x U / D T y + D H 5 Q + e N z n k P D s G I 3 g 1 b 3 / T y m t 71 q 2 p m 26 R v v 5 P j z 3 e f S Y r q v M v e b D i c Z 7 z N a F r 3 Q j 4 / P Y d S M t i d g 1 s w n Z 8 R o p 0 b m 2 w b 4 c 40 r a s y b J r P n / Z 96 F 4 H 3 w n + g J / o A M N r J v 8 / w B A T + K A n / u x 6 u U 8 k 2 U 2 n Y t S w R v m 7 c g 46 V 1 z z H f w 7 r z a W a B N l / E 4 d F O l d M 4 X w I s j x 8 g 9 J 0 X 5 c q y h t H r l X p h T G k 8 G z x U P v 0 X e g A A A A A A A A A A A A A C f u 2 c T 2E3 H 28 x 4 V j v U G W n D e J r s n k 0 z T b n s f z n P 9 n f c h + N u X A + T a y a l 7 d g G p / z a y 6 x + 9 l W e f h X f + A a 4 U B z D p / B z r + Z k H z l E 61 y z a T o f 81 / S j q f T J x + B S v H t b 48 X N o f L d R K 85 n L V O m 85 v k X X Q A A A A A A A A C f 6 A n + g A B P 9 A T + K A n + g D n e w 7 G M J 8 N i G h e z c R q W S z Y 5 r 797 G n Y X p Y 5 p 4 O t D m 2 W 3 M a h 4 d 9 G i Z P a B z L 1 d D H m 9 I A A A A A A A A A A A A A A T 91 X l X f Z q d u f W Y 4 / Q 4 R l u w G e C Y S l l s y Z K i k a v t H 5 / X b 5 / 6 F g A A C f 6 A n 8 o D Q t 9 G h + v c R r X P O 0 D R M n t A x + q 70 O e f L p A 0 L K b S O S 53 f R 4 P e A A A A A A A A A E / 0 B P 9 A A C f 6 A n 86 X 5 A A A A A A A A A A A A A A A A A A A A A A A A A A A x e T A D + / w A A A A D + g A A A Y w M m A A A A A A A A A A A A A A A A A D G Z M A H r D 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:51:47.000Z" ,
"modified" : "2017-12-11T10:51:47.000Z" ,
"first_observed" : "2017-12-11T10:51:47Z" ,
"last_observed" : "2017-12-11T10:51:47Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"name" : "Section2Chart2.jpg" ,
"content_ref" : "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q E A k A C Q A A D / 4 R D 6 R X h p Z g A A T U 0 A K g A A A A g A B A E 7 A A I A A A A Q A A A I S o d p A A Q A A A A B A A A I W p y d A A E A A A A g A A A Q 0 u o c A A c A A A g M A A A A P g A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E V t c G V 5 I E N o Y X J s b 3 R 0 Z Q A A B Z A D A A I A A A A U A A A Q q J A E A A I A A A A U A A A Q v J K R A A I A A A A D M j I A A J K S A A I A A A A D M j I A A O o c A A c A A A g M A A A I n A A A A A A c 6 g A A A A g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e628f-6938-4458-90b3-407b950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:52:10.000Z" ,
"modified" : "2017-12-11T10:52:10.000Z" ,
"first_observed" : "2017-12-11T10:52:10Z" ,
"last_observed" : "2017-12-11T10:52:10Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e628f-6938-4458-90b3-407b950d210f" ,
"artifact--5a2e628f-6938-4458-90b3-407b950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e628f-6938-4458-90b3-407b950d210f" ,
"name" : "Section4ControlPanel.jpg" ,
"content_ref" : "artifact--5a2e628f-6938-4458-90b3-407b950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e628f-6938-4458-90b3-407b950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A g A A A Q A B A A D / 2 w B D A A I B A Q E B A Q I B A Q E C A g I C A g Q D A g I C A g U E B A M E B g U G B g Y F B g Y G B w k I B g c J B w Y G C A s I C Q o K C g o K B g g L D A s K D A k K C g r / 2 w B D A Q I C A g I C A g U D A w U K B w Y H C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g r / w g A R C A C m A 7 M D A S I A A h E B A x E B / 8 Q A H A A B A Q E B A Q E B A Q E A A A A A A A A A A A g H B g U E A w I B / 8 Q A G A E B A A M B A A A A A A A A A A A A A A A A A A E C A w T / 2 g A M A w E A A h A D E A A A A a 74 J Q B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 7 v x w C g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P 6 g B P / u 7 H P 5 Q A J / o C f 6 A A A A A A A A A A A A A B l 5 q A D n f x O o c 9 y B q D E N O O h c b / A I d m c W d o z L p z p n C / e d W y X t D p n J f 2 d U 4 z n D V n K 5 w b i x H k S n G O + Q b y j v f D S E 7 a a d 48 D z D s m Z 6 Y A A A A A A A A A A A A Z 8 D Q Q P g + / M j o f w z z n j U e 5 j C w T l / 94 L j S j / b l + l z y / w C M O 9 A 1 n 5 p i 141 X 5 / y y Y 2 P p Z u p E z r 1 e R 8 o + z U 5 b q k + 8 C f 6 A n 8 o A E / 0 B P 9 A A A A A A A A A A A A A H n R J a n E Z 9 O l s M / u N s 56 v p + x V 4 z 9 d l a 8 W b 5 J U f J k t a B S I y D l K K E 95 D c Q n j 4 K W E o d v v A n / z 6 Q E t K l G M Z l W g k j r 6 I E 7 + f T A j z W t p G Q 5 H X Q i r R 9 K 0 Q l W q g A A A A A A A A A A A A z 4 G g g f B 94 z v / N F G P e 5 o o y b 89 d H L / w C 9 O O R + X u B m f 76 K M y 9 X u B y P x d 2 M u 9 D Q R h e v e s A E / w B A T + U A C f 6 A l 3 o i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / j v 2 I C s E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g E / i g J / c A V + C f 6 A n + g A A A A A A A A A A A A A A A c m d Y A A c a d k 430 j o H J e C a W w r a j 6 w D i D t 2 b 8 w b e 5 P n j T W I 6 + f e y n U T 9 T w D 3 w A A A A A A A A A A A A A A Z 8 D Q Q D M z T G G + I U a i S u D o 0 6 c 4 V c m y g z 0E4 / Y U E l P q y g X A 50 U G n m h g w H 9 z d 0 S W C e 0 B P 8 A Q E / l A A n + g J / o A A A A A A A A A A A A A A A / i I b F x z P p 3 v 8 A r C v 2 j f 5 / i 47 V F f j + n R v 814 c y 5 j d P B O B 87 R e q M d 0 3 n t V M A 8 P f u N P k y G i e f M V 7 v V f M M / 4 / Z u j J M 1 f t e p M p 4 O k + Y M R 0 f z d M J t s b n e i A A A A A A A A A A A A A A M + B o I H i + 0 M S + D f B L + t 6 K J y + S m B l X V d W M q + T Y B M f Y 7 W M o + b Y B l X Q d r 8 J j X 17 Q J K p 32 A A n + g J / K A B P 9 A S 70 R Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x Q C f x v / w D m A j f 2 A D f v 9 w A U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 d + w 8 V i n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U A n 8 U B P 7 P y w A T / Q E / 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A H n e i A A A A A A A A A A A Z 8 D Q Q D h T u m U / s a g w n V D o m R + W b g y L U z 6 m P + 6 a G x z 0 z U H C / G a M y P X A y P 7 j T k + b g e m B P 9 A T + U A C f 6 A n + g A A A A B j 2 w Y 4 n 2 t I x H s K 372 f + m y u Y o X P P e 96 a c P / A J 0 3 I H n a L y f w H w d p y v 2 H 3 d 7 w W s E / + d 73 S n z 8 b S + c G B e j 3 X 8 G O V t n m q G A / w B c b s 5 m 3 p 936 Z 9 u U 7 N y x g v 76 t 5 J + e j / A H c 8 c d 1 / + 5 y a F 4 H n 6 O Z n o P I / o a Z x 2 l S W b B 2 G U + w f t 6 X P b 8 c B 83 l 8 K d n / A F 8 X u n 9 / B z X y n W 9 L 2 u V H D 9 / m / u H 0 4 t Q 3 m H m 8 V 3 P 3 G b / 5 o v z H L 9 M 2 c w P s + R H Z c z m d A H 0 a H n 2 g g A A A G f A 0 E D l e q + Y w 7 l 6 O + U j e v f 0 / Q x j i 6 F 9 U x / Y P R / I x / w A f e v 4 J A 1 f a v l O c z j a P q M k 1 z + v G M / 8 A O 1 D 2 C R a 85 L s D 0 Q J / o C f y g A T / A E B N u o m g s + G g s + G g s + G g s + G g c f 53 + V 0 / f + P 4 V 3 / n 7 f k H W + l w H + a c m h s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + H Y f p x Y 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w 0 H x + W H e f r n w 0 F n w 0 F n w 0 F n w 0 F n w 0 F n w O E G + M + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g s + G g z / 3 + P l Q g 5 v w A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A f c H a g 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2017-12-11T10:51:57.000Z" ,
"modified" : "2017-12-11T10:51:57.000Z" ,
"first_observed" : "2017-12-11T10:51:57Z" ,
"last_observed" : "2017-12-11T10:51:57Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\"" ,
"workflow:state=\"incomplete\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"name" : "Section4Hosts.jpg" ,
"content_ref" : "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A g A A A Q A B A A D / 2 w B D A A I B A Q E B A Q I B A Q E C A g I C A g Q D A g I C A g U E B A M E B g U G B g Y F B g Y G B w k I B g c J B w Y G C A s I C Q o K C g o K B g g L D A s K D A k K C g r / 2 w B D A Q I C A g I C A g U D A w U K B w Y H C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g o K C g r / w g A R C A D e A 7 U D A S I A A h E B A x E B / 8 Q A H A A B A Q E B A Q E B A Q E A A A A A A A A A A A g H B g U E A w E C / 8 Q A F A E B A A A A A A A A A A A A A A A A A A A A A P / a A A w D A Q A C E A M Q A A A B q r k 1 A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / q A E / + b S U / h Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n 9 Q A n / w C z d J / K A B P 9 A T / Q A A A A A A A A A J O K x S / z B Y 7 D / N K C S h 5 B Y y f / A A y n O X m P w C 43 P z Y V m m f j y y E T W U f e A A A A A A A B P 9 A T + U A A A A A A A A A A B + X 6 + W c r z 3 g 8 q a 51 + B d 4 f 79 T i v 4 a Z 82 b / e a v z P Q S K U d 5 v N Z U W j l m h T 6 a 1 o M 6 U W c f y D 4 j 1 u j x X c D r Q A A A A A A A A A J / o C f y g A T / A E B P 9 A A A A A A A A A D l u p G H d t 3 Y z 37 O 2 H K f h 2 Q z 7 / G i D N u o 6 E c H 8 + i D P P f 6 Q c h 1 H 7 g A A A A A A A B P 9 A T + U A A A A A A A A A A A D n e a 0 c c H 9 / W j H u m 7 s e H 8 / S D x P P 6 s c F 8 u j j n e b 0 Y c 94 n e D m u V 0 8 Z t 6 n a g A A A A A A A A A B P 9 A T + U A C X u h U A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T + o A T / k F v z + F A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 1 A C f 8 A g K / n 8 o A E / w B A T / Q A A A A A A A A A A B E 3 W 9 x + J l H Y e 105 w v 76 X z p 7 u b 6 p h h o / i 93 w Z u 3 p e b 6 Q A A A A A A A A A n + g J / K A A A A A A A A A A A A x n Z u F M 1 / L r f w P B + L v / w B T 1 s P 1 L w z h d 9 y H t D g c z 3 D y D 0 O h / P y j 3 + C 1 b O T I 9 m / P t T Q Q A A A A A A A A A A J / o C f y g A T / A E B P 9 A A A A A A A A A A A G K + n i f 0 m q e x N + k n a / w A 8 r m j f P G 4 / E y s G N Z 8 W U 5 / o A A A A A A A A A B P 9 A T + U A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B P 9 A T + U A C f 6 A n + g A A A A A A A A A A D m / r l D s S g P n m f o y g P h x L 8 z f 867 T I D c v N 4 j x T d X x f a A A A A A A A A A J / o C f y g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A J / o C f y g A T / Q E / w B A A A A A A A A A A A E 9 f J p f r G I d n 2 / 8 O e / b 6 u i P 9 z P X P h G f c H T Q 8 f 2 A A A A A A A A A A T / Q E / l A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A T / Q E / l A A n + g J / o A A A A A A A A A A A k f 8 A T X f v J u 7 r T / p J q 0 T t + z O u k e l 8 E P u 8 G g O K N D 975 / o A A A A A A A A A E / 0 B P 5 Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E / 0 B P 5 Q A J / o C f 6 A A A A A A A A A A A J 79 r I P u O 66 L C + 2 O q / Z 4 R t v D f h h p S n x 8 T m 5 Y r n + g A A A A A A A A A E / w B A T + U A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B P 9 A T + U A C f 6 A n + g A A A A A A A A A A D n P q k / w B Y p 75 p B 0 I 3 X 9 J + 98 o P i + a z M q V g P h l N P H 9 g A A A A A A A A A T / Q E / l A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A T / Q E / l A A n + g J / o A A A A A A A A A A A x n 9 v l 9 M 8 z 7 P n 9 Q 47 p f H 906 H C 6 s 5 M + D h t Q H r / A G g A A A A A A A A A n + g J / K A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A n + g J / K A B P 9 A T / Q A A A A A A A A A A B H n 0 0 t 9 Z H X a 0 l 85 H H o 1 h 6 J 58 n 2 B n R x + f V x 5 p + n Q A A A A A A A A A A n + g J / K A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A n + g J / K A B N u o 6 C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + a C M + x C s B n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n z Q R n 2 P 1 C A P / x A A o E A A B B A I C A w E A A g M A A w A A A A A H A A Q F B g M X G D c B A k B Q C B Y S F B U 2 O G D / 2 g A I A Q E A A Q U C I B T j B 4 / 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 n H 8 k I x o / 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q 36 t + r f q g T j F z d r R C 71 / U I X e v 75 C 71 R C 71 + x v Z W T m 1 f O Q u 9 f l 9 / f 0 x + t U I d Z v E l 6 G K u 5 M s 6 S G E R N w E 7 G W W G l C 1 C x z i Z I k P H Z I O 4 Q M 9 A U m + Q R C j J q b i a 5 G x R F r U p R o A l R 85 N Z D L W v T P m z Y m + K J L s D L O r W R 6 t T p N X W 3 s 6 R B 4 C 9 G 430 + U W 8 J a K r a H N m + Y h d 6 o h d 6 / F a X j 6 n u W g 6 p s k W W k R L W O u B z O y b + u S v w t + K z a A p 9 j u j 9 t h h I K + y e V i U K p U x 4 w q U Z X o S e D d u n L n l n 621 g 2 U D W 69 S 54 e V m r 1 w i S F S a 7 C k X N L g c Q 2 j 8 n v l Y f C Q u 9 f l l I 5 l M x o z Y s I c m k 32 i X o 68 Q s z d i O E X u B 4 M 7 P K Z p x 1 W I h v X D J Q o G I t O M H e n r j Z z F d h b B 4 Z + X O L + J M r 5 s l d u 8 F 7 W S G / j 5 J P W L a H I G P E 2 R h r 0 K 0 f o 1 f 8 A i X 8 h M j T U j v F e f J v r H p d M W D 5 S F 3 q i F 3 r 8 U n V K / L z k i M m l m J r 0 d U 2 R h t Z U f + t 2 K h V W 1 u m V Q r k c 8 d 0 W q P m 0 G N q Z X J W M F 9 G i J V 4 K B + + k v 65 D + s t G D u n Q 6 c C + j O p a d G F I s c l j r E H i k v e k 1 r L E 4 s X p h x / C Q u 9 f m Y V 2 H j Z f 1 F V D 9 J a w j m m 2 l / l p t Z y Y v Y G D P y 4 l B 5 U p p j C Q c V X Y 2 I q 8 J B 4 I G B i 6 x D x d P r U L W K 6 O K h V X 3 s K 6 H 7 y / m s w v m x R Q t o c J J z d d i L F 4 l q n j l L t Z 6 v B 3 C J h x C P o O U s Q r p F r m q v Q 61 T s n y k L v V E L v X 9 Q h d 6 / v k L v V G q s Q d y K 3 F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t X I E C m K K v F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a 4 u A t c X A W u L g L X F w F r i 4 C 1 x c B a d D C j D c 5 o h d 6 / q
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
]
}
