2023-06-14 17:31:25 +00:00
{
"type" : "bundle" ,
"id" : "bundle--5bb3ba96-4868-4147-a4e8-4dfb02de0b81" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-03T12:01:49.000Z" ,
"modified" : "2018-10-03T12:01:49.000Z" ,
"name" : "CIRCL" ,
"identity_class" : "organization"
} ,
{
"type" : "grouping" ,
"spec_version" : "2.1" ,
"id" : "grouping--5bb3ba96-4868-4147-a4e8-4dfb02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-03T12:01:49.000Z" ,
"modified" : "2018-10-03T12:01:49.000Z" ,
"name" : "OSINT - DHS-USCERT MAR-10201537" ,
"context" : "suspicious-activity" ,
"object_refs" : [
"observed-data--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"file--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"artifact--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"indicator--5bb3bb0e-9b30-411e-8d7a-46a802de0b81" ,
"indicator--5bb3bb10-4c18-4c67-863c-41d502de0b81" ,
"indicator--5bb3bb11-50ec-4b22-b675-49fa02de0b81" ,
"indicator--5bb3bb11-4f40-4d56-b3e2-428c02de0b81" ,
"indicator--5bb3bb12-0114-4a64-85f3-450802de0b81" ,
"indicator--5bb3bb12-58a4-4245-97ea-43fb02de0b81" ,
"indicator--5bb3bb12-b39c-47e3-9534-48d002de0b81" ,
"indicator--5bb3bb13-fdb8-49e6-830d-447402de0b81" ,
"indicator--5bb3bb13-9b80-4bfb-941e-4d0c02de0b81" ,
"indicator--5bb3bb14-5f78-4188-9fe1-4d6f02de0b81" ,
"indicator--5bb3bb14-1b64-4ed2-9102-459702de0b81" ,
"indicator--5bb3bb15-8bf0-4b08-a195-4fbb02de0b81" ,
"indicator--5bb3bb25-7648-4e70-9280-4a4802de0b81" ,
"indicator--5bb3bb26-df88-4d34-9157-405002de0b81" ,
"observed-data--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"network-traffic--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"ipv4-addr--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"indicator--5bb3bb74-8834-4c0a-b291-458202de0b81" ,
"indicator--24353fa4-39c9-4f22-afef-ffbeb15bfd8e" ,
"x-misp-object--2379fc5b-3f38-41fa-953f-35dda1401a93" ,
"indicator--195ddb4c-b080-4cf9-8ec9-5ebbdb25c37c" ,
"x-misp-object--1b43c535-7d20-4ac8-9a35-b26aa3a2f09b" ,
"indicator--8176c716-23dc-44d4-9664-4f0939090210" ,
"x-misp-object--60fa3a56-124d-43d8-b8fd-3d2c4b7feb4d" ,
"indicator--169823c0-da81-4f29-a314-c836d9bb2f0e" ,
"x-misp-object--c64ab4ce-d90f-4cb6-bcce-f87642debe8e" ,
"indicator--994af4ce-78cf-46fb-8b81-9b7ec660fbb5" ,
"x-misp-object--82711df4-871d-4350-984d-c0dbf94eba02" ,
"relationship--fc295a46-cba3-4a0e-9c45-f879c690f3b6" ,
"relationship--bf8f0159-fd53-4864-b73e-306537a22d11" ,
"relationship--ef7ad3b6-54c2-4d7f-b760-07b2533434c1" ,
"relationship--0e477337-6351-4019-9335-8a7775370983" ,
"relationship--1a87fabe-c0e9-4220-83b7-eb4a353a40c4"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"circl:topic=\"finance\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:36:52.000Z" ,
"modified" : "2018-10-02T18:36:52.000Z" ,
"first_observed" : "2018-10-02T18:36:52Z" ,
"last_observed" : "2018-10-02T18:36:52Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"artifact--5bb3bac4-92fc-434c-abcc-4f5302de0b81"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"name" : "MAR-10201537.pdf" ,
"content_ref" : "artifact--5bb3bac4-92fc-434c-abcc-4f5302de0b81"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5bb3bac4-92fc-434c-abcc-4f5302de0b81" ,
"payload_bin" : " J V B E R i 0 x L j Y N J e L j z 9 M N C j E 2 M S A w I G 9 i a g 0 8 P C 9 M a W 5 l Y X J p e m V k I D E v T C A 3 N T E 4 O D E v T y A x N j M v R S A 2 O D I 4 M C 9 O I D M y L 1 Q g N z U x M z I z L 0 g g W y A 0 O D M g M z U x X T 4 + D W V u Z G 9 i a g 0 g I C A g I C A g I C A g I C A g D Q o x N z g g M C B v Y m o N P D w v R G V j b 2 R l U G F y b X M 8 P C 9 D b 2 x 1 b W 5 z I D Q v U H J l Z G l j d G 9 y I D E y P j 4 v R m l s d G V y L 0 Z s Y X R l R G V j b 2 R l L 0 l E W z x C R D c 5 R D M y N D E 0 R T Q z R D Q 5 N k R C N 0 F G R U V F O D Z D Q j A w N D 48 N j Z G O E I x M U I 4 M T k x O D M 0 M j g 2 R j E 0 Q j c z N j M 0 Q z k 2 Q k E + X S 9 J b m R l e F s x N j E g M j h d L 0 x l b m d 0 a C A 4 N y 9 Q c m V 2 I D c 1 M T M y N C 9 S b 290 I D E 2 M i A w I F I v U 2 l 6 Z S A x O D k v V H l w Z S 9 Y U m V m L 1 d b M S A y I D F d P j 5 z d H J l Y W 0 N C m j e Y m J k E G B g Y m A 2 A h I M L k C C c T + Q Y O E F i Z m C C A c Q w Q 4 i G E F E L 5 B g i g O x j g M J 4 Q 4 Q d z O Q 4 G 4 F E k Z z g I Q b G 5 D w m c j A x M h g A D K U g Z E Y 4 j + j / Q + A A A M A k C g K H g 0 K Z W 5 k c 3 R y Z W F t D W V u Z G 9 i a g 1 z d G F y d H h y Z W Y N C j A N C i U l R U 9 G D Q o g I C A g I C A g I A 0 K M T g 4 I D A g b 2 J q D T w 8 L 0 Z p b H R l c i 9 G b G F 0 Z U R l Y 29 k Z S 9 M I D Q 1 O S 9 M Z W 5 n d G g g M j Y 4 L 1 M g M z k 2 P j 5 z d H J l Y W 0 N C m j e Y m B g Y G Z g Y F J n Y A E y O h k E G R B A E C j G C s Q c B y B 8 o D p B Q W F B Q Y b G K w 0 M j F s d j g W E f R D 4 w f W G V Z 0 t t O n f w a U P 7 B 7 o n R B a I i o 1 e R / r e a b L j e k O x 1 w T / t t x z q 4 V 5 j G 5 + l h x 4 s G X Z 56 Z K O Y s U F 3 A t D Y U A s J m g g g g B p r P q p 3 s N H X j Q q 8 b F 5 b m Z A R t M 9 G M l h J Z 28 s V d q w V U 0 J S N S c j 5 c v a 3 h 6 m n 6 o 5 P T j U G W E 1 y o G 9 o 6 G i g y B h 3 t E g W N H R w c D e g U W e A U O E G m E C D I N c B u 7 E y 0 C a H 4 i F w a E e A m R f 43 s i z q F 3 I C x h t a N M E x f L M 48 L Q j 8 W i 3 k K 5 q w 60 H B S n o + B g U 8 A E k W F D N y l p k C a E Y h 7 A Q I M A H 30 p e c N C m V u Z H N 0 c m V h b Q 1 l b m R v Y m o N M T Y y I D A g b 2 J q D T w 8 L 1 B h Z 2 V M Y W J l b H M g M T U 0 I D A g U i 9 Q Y W d l c y A x N T Y g M C B S L 1 R 5 c G U v Q 2 F 0 Y W x v Z z 4 + D W V u Z G 9 i a g 0 x N j M g M C B v Y m o N P D w v Q 29 u d G V u d H N b M T Y 1 I D A g U i A x N j Y g M C B S I D E 2 N y A w I F I g M T Y 4 I D A g U i A x N j k g M C B S I D E 3 M C A w I F I g M T c x I D A g U i A x N z M g M C B S X S 9 D c m 9 w Q m 94 W z A g M C A 2 M T I g N z k y X S 9 N Z W R p Y U J v e F s w I D A g N j E y I D c 5 M l 0 v U G F y Z W 50 I D E 1 N y A w I F I v U m V z b 3 V y Y 2 V z I D E 3 O S A w I F I v U m 90 Y X R l I D A v V H l w Z S 9 Q Y W d l P j 4 N Z W 5 k b 2 J q D T E 2 N C A w I G 9 i a g 0 8 P C 9 G a W x 0 Z X I v R m x h d G V E Z W N v Z G U v R m l y c 3 Q g N z M v T G V u Z 3 R o I D k 0 M S 9 O I D k v V H l w Z S 9 P Y m p T d G 0 + P n N 0 c m V h b Q 0 K a N 6 c V d t u 2 z g Q / R U + t l h k x T t F o D C Q u H X i R Z 0 Y l d E W C P K g O l x b u 5 Z k y M o 2 + f s 9 Q / k e 1 E k D Y 8 T R 3 D g c n y M K 5 x l n I o V Y j V V A F E Q y q V X U j Z B Y N f M u x W q Y k J o U S + L x c E x y b 9 m H D 0 m / X t R N t s y n g V 5 W N p b l 7 E u v l 3 x 6 b C + z N m / J c 5 m J u F H n G d R V C + N k I u N u M E L X c a d O t 3 G P L n j c 1 N M s t L f J + O M g m Y T H N h m W + S z 0 75 L v N z / + C V O q N C x R 3 s m Y P S x R 1 a 2 z e 73 b Z N j v X + S r c A + r J u s d E m 7 G 7 O 98 s Q p Q R k w k 2 f n 6 N R s x / i e X y e R p G X Y H S O p l 5 + / 1 k H u + m o a q Z V 7 Y p J 8 v r 0 I x m 7 f M p j b 5 G D r P m R Q u G S z y 2 Y o p G Q 97 c V E / 3 p 5 J n s J n M H a u M V s l 7 q J z k J f F 4 u n d o M m r f x d F x S 7 r d l 5 M 2 V X I / 3 t 630 U U i 0 C H 6 s Z D l u u 8 D M l 48 N f N 5 e i P T W K X d x b z Y l D W N q G d z p P r u i n z R T R 967 r V n C f D N l 8 U 0 / N q t g i M J 1 k b y i s m f B q 1 r 1 G L Q 6 A s O l h T L N u 6 S b 6 v z 2 u E i M O g y V L I y W Y + V d P 6 v q h m y b e i O q 9 W x f Z 9 U D S r t j / P m 82 g d j t F P N J x P + f r E C F l k j 38 a K m r S f M Q Y n v b H l H 7 v p 2 v b m m + S t C k u p / T 9 J R e R e l s E p M k w S G Y A a p f I 9 L t a h p t 8 b Q q Z R a E s R I r K G W I O N o B C h o i c C T C u z X I V 56 l W h B I m P W i y 6 L V w 88 d 0 46 v 63 m O F d W N p 87 S 7 Y 5 x 19 i J Y 0 a q b s W 78 p I Z U J L i p S f Q G 4 B c e s 1 S Y 7 o o 6 B S J q a A n o 7 C C K A Z U M 9 x i O j Q T o r t 24 u 4 E v K 17 E d 4 C f a z h j U m n / j S 8 R + G + e C g P 8 W 2 f 43 v 8 + R h S X e I b A Z 66 D b 6 F O I l v 7 d V z f P + y m T c C X B 8 B 3 O l X A p z A q P B t 3 o D T O Y K a F H o L 9 C 1 s A b u N 6 A j S V 8 J 9 n X N g 54 I 5 A Y B z F W F r U M 8 S z B R 0 T m S Q E O R Z F 0 F m 0 Y / 2 g D 7 y r C F g A 4 p 4 p 5 U o Y N C 1 J t J 41 E B e S r r F P u R T 3 T m o 53 g e E I O E x 0 g i l L Y d s Y z U I D x 0 g X l o u s N M F K M 6 P X U 82 o 30 X T x 0 B Z 82 y J O w 4 w O h q S P Q R 9 O U 4 N f i k H o v / 2 h W v x P v n N r X D 6 g H 6 u x R T 3 B g e Y 97 d s M 9 v c c 9 Y 3 G 1 K E 73 M i c C c n d A v k l R h h W 7 D j / Z l 7 r M q / c 7 j k U P H N E + z k a T N x H r K 0 v l S T r R I Q 759 H z j N 5 L I H p F I p K 8 k 0 a 9 + i q A X / R v Q v S R H f 62 k i w t f T H o K s b V R 3 S 4 i T f 0 6 i j + L 9 F q f B M 6 u y t 7 N w I 99 s A B S / w s w A M 9 j l s 4 N C m V u Z H N 0 c m V h b Q 1 l b m R v Y m o N M T Y 1 I D A g b 2 J q D T w 8 L 0 Z p b H R l c i 9 G b G F 0 Z U R l Y 29 k Z S 9 M Z W 5 n d G g g N z U w P j 5 z d H J l Y W 0 N C k i J l F R N b 9 s 4 E L 3 r V w x 6 I o E 1 Q 1 I k R f X Y p m i 6 W C x a R M A e 0 h 60 M p 0 I t S l X U h r k 3 / e R t I 0 u 0 B R Y + y B y O J z 3 M S M p u q + u 3 t 8 q u l + q 2 g n l S S v h y N a t 8 J o a 44 W n O V S 7 S j j n k W u 0 M J p M a 1 O q 1 V 60 j r R o X E m 6 e r s 4 G h Y S r b T e 41 H j h 4 d 13 t E y x M o a o Q 0 Z q 1 N 1 q x q h D K l a N K b c L 8 f a O Y H b L x 0 r Z Y X 71 b F M / J w V t a O m 9 i B M S j o h N S G z K S l v u u q q 6 x C h b l c p K Z w m i X 9 Z m V Y J h b u m T o K 6 Q w V X K i G l M d Q N 1 Q Y r 66 l 7 q u 5 Y 9 x d 3 o m Y f e c t e c y 0 s o 3 + 4 Y z d c i Z Z 94 P C M d d y K h r 3 j X 7 o / q 3 d d 9 Q 1 g q J r B a j C E B z D S U y 2 T g c O h u v p w U H Q 9 V Z 9 + V l G r z P 4 i w p m L i h e 4 o 4 X y Q v 3 / 8 k z I G 4 P 2 t 6 Z F b 4 V u l K b u G n H I l 0 X 539 M 67 s a h 5 w b V 1 n G K + S Y 8 N c V T n x q b a O W F b f K Y N D J R g n / K p l J Y Q E 8 x 8 g E E F R s X C D t O 80 r Y + r Q 9 z t P 3 c R u 29 K p f E H O M x u U V 7 a a Z x g j K j m F 5 y N j K Y c w S J p g m C H 2 G s A W i B 0 t U 0 C z 2 + 1 L + + D g f p y U s N M X 9 s 6 D u I d B 1 O P Z z z l r 5 p g a j Q 4 g r T b t y 4 W Y q S K 1 Q t V M F K o 2 D r E 9 Y J z W H s O / j l m 4 D 3 z j Y M z z y j W X z i J I G j J / 5 J u n 4 z K 5 v E B e G 3 S J g 2 G d O 2 w l k 4 r S e V K f T l g X q 43 P G 3 e S u e t q g x d b Z k 1 D Z n M B V A X + C g N T L m a c 81 s d 1 T B J z b F d E p Y r 0 d Q T F O d z 383 a M 9 z k 0 x t 3 F y v 94 e d Y n T c G A 56 n z J r v E U v e T D h q m P G Z x L Y c j V y y i d U 9 Q X s O + B + h s 2 R g F d i 0 r f t / c n l W f r Z U W 75 m 8 z F u C b w r q S i F u p 3 n J j g D s c M g G a z Y P Y 1 + u S + F b 9 R v i e 1 i b O U 7 b x w G N n U t j l 1 C i 35 M / E D S E P 4 r j J g 2 V L 5 Y 7 f M J Q 9 o 7 N Y R f m E A d I y 0 O I 12 n F / K Z x z b f w l a l N U 0 j c s X 8 f 9 / u w n h O B O K 0 P Y X 4 a l y D 4 F 6 I f A g w A T 99 N T A 0 K Z W 5 k c 3 R y Z W F t D W V u Z G 9 i a g 0 x N j Y g M C B v Y m o N P D w v R m l s d G V y L 0 Z s Y X R l R G V j b 2 R l L 0 x l b m d 0 a C A 3 N j E + P n N 0 c m V h b Q 0 K S I l 8 V E 1 v 4 y A U v O d X v C N I N T U 2 / u q 17 W q 7 q l a V a m k P b Q + O Q x p a 20 S A N + q / 3 w f Y 6 a r
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb0e-9b30-411e-8d7a-46a802de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:06.000Z" ,
"modified" : "2018-10-02T18:38:06.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = '10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:06Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb10-4c18-4c67-863c-41d502de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:08.000Z" ,
"modified" : "2018-10-02T18:38:08.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:name = 'Lost_File.so']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:08Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"filename\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb11-50ec-4b22-b675-49fa02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:09.000Z" ,
"modified" : "2018-10-02T18:38:09.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = '3a5ba44f140821849de2d82d5a137c3bb5a736130dddb86b296d94e6b421594c']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:09Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb11-4f40-4d56-b3e2-428c02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:09.000Z" ,
"modified" : "2018-10-02T18:38:09.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = '4a740227eeb82c20286d9c112ef95f0c1380d0e90ffb39fc75c8456db4f60756']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:09Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb12-0114-4a64-85f3-450802de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:10.000Z" ,
"modified" : "2018-10-02T18:38:10.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = '820ca1903a30516263d630c7c08f2b95f7b65dffceb21129c51c9e21cf9551c6']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:10Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb12-58a4-4245-97ea-43fb02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:10.000Z" ,
"modified" : "2018-10-02T18:38:10.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'a9bc09a17d55fc790568ac864e3885434a43c33834551e027adb1896a463aafc']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:10Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb12-b39c-47e3-9534-48d002de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:10.000Z" ,
"modified" : "2018-10-02T18:38:10.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'ab88f12f0a30b4601dc26dbae57646efb77d5c6382fb25522c529437e5428629']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:10Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb13-fdb8-49e6-830d-447402de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:11.000Z" ,
"modified" : "2018-10-02T18:38:11.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'ca9ab48d293cc84092e8db8f0ca99cb155b30c61d32a1da7cd3687de454fe86c']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:11Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb13-9b80-4bfb-941e-4d0c02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:11.000Z" ,
"modified" : "2018-10-02T18:38:11.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[domain-name:value = '2.so']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:11Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"domain\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb14-5f78-4188-9fe1-4d6f02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:12.000Z" ,
"modified" : "2018-10-02T18:38:12.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'd465637518024262c063f4a82d799a4e40ff3381014972f24ea18bc23c3b27ee']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:12Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb14-1b64-4ed2-9102-459702de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:12.000Z" ,
"modified" : "2018-10-02T18:38:12.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'e03dc5f1447f243cf1f305c58d95000ef4e7dbcc5c4e91154daa5acd83fea9a8']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:12Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb15-8bf0-4b08-a195-4fbb02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:13.000Z" ,
"modified" : "2018-10-02T18:38:13.000Z" ,
"description" : "Submitted Files (10)" ,
"pattern" : "[file:hashes.SHA256 = 'f3e521996c85c0cdb2bfb3a0fd91eb03e25ba6feef2ba3a1da844f1b17278dd2']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:13Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb25-7648-4e70-9280-4a4802de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:29.000Z" ,
"modified" : "2018-10-02T18:38:29.000Z" ,
"pattern" : "[file:hashes.SHA256 = '1f2cd2bc23556fb84a51467fedb89cbde7a5883f49e3cfd75a241a6f08a42d6d']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:29Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb26-df88-4d34-9157-405002de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:30.000Z" ,
"modified" : "2018-10-02T18:38:30.000Z" ,
"pattern" : "[file:hashes.SHA256 = '9ddacbcd0700dc4b9babcd09ac1cebe23a0035099cb612e6c85ff4dffd087a26']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:38:30Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"sha256\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:38:42.000Z" ,
"modified" : "2018-10-02T18:38:42.000Z" ,
"first_observed" : "2018-10-02T18:38:42Z" ,
"last_observed" : "2018-10-02T18:38:42Z" ,
"number_observed" : 1 ,
"object_refs" : [
"network-traffic--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"ipv4-addr--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81"
] ,
"labels" : [
"misp:type=\"ip-dst\"" ,
"misp:category=\"Network activity\""
]
} ,
{
"type" : "network-traffic" ,
"spec_version" : "2.1" ,
"id" : "network-traffic--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"dst_ref" : "ipv4-addr--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"protocols" : [
"tcp"
]
} ,
{
"type" : "ipv4-addr" ,
"spec_version" : "2.1" ,
"id" : "ipv4-addr--5bb3bb32-dcdc-451b-a51c-4a4d02de0b81" ,
"value" : "75.99.63.27"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5bb3bb74-8834-4c0a-b291-458202de0b81" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:48.000Z" ,
"modified" : "2018-10-02T18:39:48.000Z" ,
"pattern" : "[domain-name:value = 'optonline.net']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:39:48Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"domain\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--24353fa4-39c9-4f22-afef-ffbeb15bfd8e" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:05.000Z" ,
"modified" : "2018-10-02T18:39:05.000Z" ,
"pattern" : "[file:hashes.MD5 = '4f67f3e4a7509af1b2b1c6180a03b3e4' AND file:hashes.SHA1 = '1c9a437ed876a0ce0e5374bd93acdfd9e9023f1f' AND file:hashes.SHA256 = '4a740227eeb82c20286d9c112ef95f0c1380d0e90ffb39fc75c8456db4f60756']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:39:05Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--2379fc5b-3f38-41fa-953f-35dda1401a93" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:04.000Z" ,
"modified" : "2018-10-02T18:39:04.000Z" ,
"labels" : [
"misp:name=\"virustotal-report\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "datetime" ,
"object_relation" : "last-submission" ,
"value" : "2018-09-28 04:06:38" ,
"category" : "Other" ,
"uuid" : "d496f4be-1741-480d-bf18-f74e42f46633"
} ,
{
"type" : "link" ,
"object_relation" : "permalink" ,
"value" : "https://www.virustotal.com/file/4a740227eeb82c20286d9c112ef95f0c1380d0e90ffb39fc75c8456db4f60756/analysis/1538107598/" ,
"category" : "External analysis" ,
"uuid" : "01a4bf63-9e77-44be-8351-6c4a963d2467"
} ,
{
"type" : "text" ,
"object_relation" : "detection-ratio" ,
"value" : "36/69" ,
"category" : "Other" ,
"uuid" : "1283ebae-cffd-4532-9965-1ad59314f771"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "virustotal-report"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--195ddb4c-b080-4cf9-8ec9-5ebbdb25c37c" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:08.000Z" ,
"modified" : "2018-10-02T18:39:08.000Z" ,
"pattern" : "[file:hashes.MD5 = '8efaabb7b1700686efedadb7949eba49' AND file:hashes.SHA1 = '7b17d63694eee51010bcad143bc72e355e17cb50' AND file:hashes.SHA256 = 'a9bc09a17d55fc790568ac864e3885434a43c33834551e027adb1896a463aafc']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:39:08Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--1b43c535-7d20-4ac8-9a35-b26aa3a2f09b" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:06.000Z" ,
"modified" : "2018-10-02T18:39:06.000Z" ,
"labels" : [
"misp:name=\"virustotal-report\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "datetime" ,
"object_relation" : "last-submission" ,
"value" : "2018-09-05 03:11:47" ,
"category" : "Other" ,
"uuid" : "dd585d6e-ca2e-49e9-b82e-8c55f307afac"
} ,
{
"type" : "link" ,
"object_relation" : "permalink" ,
"value" : "https://www.virustotal.com/file/a9bc09a17d55fc790568ac864e3885434a43c33834551e027adb1896a463aafc/analysis/1536117107/" ,
"category" : "External analysis" ,
"uuid" : "46df00d5-2e72-462f-94b1-3f466d2b967f"
} ,
{
"type" : "text" ,
"object_relation" : "detection-ratio" ,
"value" : "34/66" ,
"category" : "Other" ,
"uuid" : "bdcb9d76-cb04-4c88-bbb9-3ee566f8300a"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "virustotal-report"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--8176c716-23dc-44d4-9664-4f0939090210" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-03T12:01:32.000Z" ,
"modified" : "2018-10-03T12:01:32.000Z" ,
"description" : "This file is not considered malicious, but may have been used by actors for malicious purposes." ,
"pattern" : "[file:hashes.MD5 = 'b66be2f7c046205b01453951c161e6cc' AND file:hashes.SHA1 = 'ec5784548ffb33055d224c184ab2393f47566c7a' AND file:hashes.SHA256 = 'ca9ab48d293cc84092e8db8f0ca99cb155b30c61d32a1da7cd3687de454fe86c' AND file:x_misp_state = 'Malicious']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-03T12:01:32Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--60fa3a56-124d-43d8-b8fd-3d2c4b7feb4d" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:08.000Z" ,
"modified" : "2018-10-02T18:39:08.000Z" ,
"labels" : [
"misp:name=\"virustotal-report\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "datetime" ,
"object_relation" : "last-submission" ,
"value" : "2017-11-15 12:57:52" ,
"category" : "Other" ,
"uuid" : "4b1ef54b-59fe-454d-951c-ac9015a21b31"
} ,
{
"type" : "link" ,
"object_relation" : "permalink" ,
"value" : "https://www.virustotal.com/file/ca9ab48d293cc84092e8db8f0ca99cb155b30c61d32a1da7cd3687de454fe86c/analysis/1510750672/" ,
"category" : "External analysis" ,
"uuid" : "41afe04e-8c3f-467e-85cc-d0a5832105ab"
} ,
{
"type" : "text" ,
"object_relation" : "detection-ratio" ,
"value" : "0/59" ,
"category" : "Other" ,
"uuid" : "7c82c27e-9c5a-493e-bdbb-92bef39edeef"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "virustotal-report"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--169823c0-da81-4f29-a314-c836d9bb2f0e" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:12.000Z" ,
"modified" : "2018-10-02T18:39:12.000Z" ,
"pattern" : "[file:hashes.MD5 = '5cfa1c2cb430bec721063e3e2d144feb' AND file:hashes.SHA1 = 'c1a9044f180dc7d0c87e256c4b9356463f2cb7c6' AND file:hashes.SHA256 = '820ca1903a30516263d630c7c08f2b95f7b65dffceb21129c51c9e21cf9551c6']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-02T18:39:12Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--c64ab4ce-d90f-4cb6-bcce-f87642debe8e" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:11.000Z" ,
"modified" : "2018-10-02T18:39:11.000Z" ,
"labels" : [
"misp:name=\"virustotal-report\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "datetime" ,
"object_relation" : "last-submission" ,
"value" : "2018-09-28 04:05:30" ,
"category" : "Other" ,
"uuid" : "e30c82a0-4f63-4284-991e-c8b84b4adb9f"
} ,
{
"type" : "link" ,
"object_relation" : "permalink" ,
"value" : "https://www.virustotal.com/file/820ca1903a30516263d630c7c08f2b95f7b65dffceb21129c51c9e21cf9551c6/analysis/1538107530/" ,
"category" : "External analysis" ,
"uuid" : "d879fdc2-4115-42a5-aeec-423ec7f6d487"
} ,
{
"type" : "text" ,
"object_relation" : "detection-ratio" ,
"value" : "41/69" ,
"category" : "Other" ,
"uuid" : "bbfc0be3-6d8b-4df0-8e08-b32da3089b4d"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "virustotal-report"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--994af4ce-78cf-46fb-8b81-9b7ec660fbb5" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-03T11:59:03.000Z" ,
"modified" : "2018-10-03T11:59:03.000Z" ,
"description" : "This file is not considered malicious but may have been used by actors for malicious purposes." ,
"pattern" : "[file:hashes.MD5 = '46b318bbb72ee68c9d9183d78e79fb5a' AND file:hashes.SHA1 = '5375ad3746ce42a6f262f55c4f1f0d273fb69c54' AND file:hashes.SHA256 = '10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba' AND file:x_misp_state = 'Malicious']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2018-10-03T11:59:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--82711df4-871d-4350-984d-c0dbf94eba02" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-02T18:39:13.000Z" ,
"modified" : "2018-10-02T18:39:13.000Z" ,
"labels" : [
"misp:name=\"virustotal-report\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "datetime" ,
"object_relation" : "last-submission" ,
"value" : "2018-10-01 18:10:22" ,
"category" : "Other" ,
"uuid" : "487eeed9-2b31-4cbb-aaf8-4ff4c9c3f119"
} ,
{
"type" : "link" ,
"object_relation" : "permalink" ,
"value" : "https://www.virustotal.com/file/10ac312c8dd02e417dd24d53c99525c29d74dcbc84730351ad7a4e0a4b1a0eba/analysis/1538417422/" ,
"category" : "External analysis" ,
"uuid" : "d10f033c-7614-4ad4-8b20-88e40ef7c530"
} ,
{
"type" : "text" ,
"object_relation" : "detection-ratio" ,
"value" : "0/58" ,
"category" : "Other" ,
"uuid" : "c3547d1e-4759-4fea-9a93-d724275cd2aa"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "virustotal-report"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--fc295a46-cba3-4a0e-9c45-f879c690f3b6" ,
"created" : "2018-10-02T18:39:14.000Z" ,
"modified" : "2018-10-02T18:39:14.000Z" ,
"relationship_type" : "analysed-with" ,
"source_ref" : "indicator--24353fa4-39c9-4f22-afef-ffbeb15bfd8e" ,
"target_ref" : "x-misp-object--2379fc5b-3f38-41fa-953f-35dda1401a93"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--bf8f0159-fd53-4864-b73e-306537a22d11" ,
"created" : "2018-10-02T18:39:15.000Z" ,
"modified" : "2018-10-02T18:39:15.000Z" ,
"relationship_type" : "analysed-with" ,
"source_ref" : "indicator--195ddb4c-b080-4cf9-8ec9-5ebbdb25c37c" ,
"target_ref" : "x-misp-object--1b43c535-7d20-4ac8-9a35-b26aa3a2f09b"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--ef7ad3b6-54c2-4d7f-b760-07b2533434c1" ,
"created" : "2018-10-02T18:39:16.000Z" ,
"modified" : "2018-10-02T18:39:16.000Z" ,
"relationship_type" : "analysed-with" ,
"source_ref" : "indicator--8176c716-23dc-44d4-9664-4f0939090210" ,
"target_ref" : "x-misp-object--60fa3a56-124d-43d8-b8fd-3d2c4b7feb4d"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--0e477337-6351-4019-9335-8a7775370983" ,
"created" : "2018-10-02T18:39:16.000Z" ,
"modified" : "2018-10-02T18:39:16.000Z" ,
"relationship_type" : "analysed-with" ,
"source_ref" : "indicator--169823c0-da81-4f29-a314-c836d9bb2f0e" ,
"target_ref" : "x-misp-object--c64ab4ce-d90f-4cb6-bcce-f87642debe8e"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--1a87fabe-c0e9-4220-83b7-eb4a353a40c4" ,
"created" : "2018-10-02T18:39:16.000Z" ,
"modified" : "2018-10-02T18:39:16.000Z" ,
"relationship_type" : "analysed-with" ,
"source_ref" : "indicator--994af4ce-78cf-46fb-8b81-9b7ec660fbb5" ,
"target_ref" : "x-misp-object--82711df4-871d-4350-984d-c0dbf94eba02"
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
]
}
