2023-06-14 17:31:25 +00:00
{
"type" : "bundle" ,
"id" : "bundle--5c36ff44-f368-46b9-928e-4b8d950d210f" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T09:36:48.000Z" ,
"modified" : "2019-01-10T09:36:48.000Z" ,
"name" : "CIRCL" ,
"identity_class" : "organization"
} ,
{
"type" : "grouping" ,
"spec_version" : "2.1" ,
"id" : "grouping--5c36ff44-f368-46b9-928e-4b8d950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T09:36:48.000Z" ,
"modified" : "2019-01-10T09:36:48.000Z" ,
"name" : "OSINT - CryptoMix Ransomware Exploits Crowdfunding Sites for Child Cancer Treatment" ,
"context" : "suspicious-activity" ,
"object_refs" : [
"observed-data--5c36ffc4-308c-417e-8bfe-467f950d210f" ,
"url--5c36ffc4-308c-417e-8bfe-467f950d210f" ,
"observed-data--5c36ffc4-201c-49aa-8e56-4258950d210f" ,
"url--5c36ffc4-201c-49aa-8e56-4258950d210f" ,
"observed-data--5c370102-93a8-46ab-8677-43a6950d210f" ,
"file--5c370102-93a8-46ab-8677-43a6950d210f" ,
"artifact--5c370102-93a8-46ab-8677-43a6950d210f" ,
"x-misp-attribute--5c370126-546c-4bcd-93bd-4f69950d210f" ,
"indicator--5c3701c2-4d58-4945-8471-4c68950d210f" ,
"indicator--5c3701c3-40c8-4859-b3b7-4a70950d210f" ,
"indicator--5c3701c3-4950-4565-857f-4a71950d210f" ,
"indicator--5c3701c4-89b8-40da-949d-4f80950d210f" ,
"indicator--5c3701c4-2460-465a-b459-495e950d210f" ,
"indicator--5c3701c4-6a0c-4826-8d25-4e38950d210f" ,
"observed-data--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"file--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"artifact--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"observed-data--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"file--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"artifact--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"observed-data--5c370585-a444-4c22-8c9b-497f950d210f" ,
"file--5c370585-a444-4c22-8c9b-497f950d210f" ,
"artifact--5c370585-a444-4c22-8c9b-497f950d210f" ,
"observed-data--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"file--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"artifact--5c37058f-1bfc-44b4-a954-47f3950d210f"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"malware_classification:malware-category=\"Ransomware\"" ,
"circl:incident-classification=\"malware\"" ,
"osint:source-type=\"blog-post\"" ,
"misp-galaxy:malpedia=\"CryptoMix\"" ,
"misp-galaxy:ransomware=\"CryptoMix\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c36ffc4-308c-417e-8bfe-467f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:24:21.000Z" ,
"modified" : "2019-01-10T08:24:21.000Z" ,
"first_observed" : "2019-01-10T08:24:21Z" ,
"last_observed" : "2019-01-10T08:24:21Z" ,
"number_observed" : 1 ,
"object_refs" : [
"url--5c36ffc4-308c-417e-8bfe-467f950d210f"
] ,
"labels" : [
"misp:type=\"link\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
]
} ,
{
"type" : "url" ,
"spec_version" : "2.1" ,
"id" : "url--5c36ffc4-308c-417e-8bfe-467f950d210f" ,
"value" : "https://www.bleepingcomputer.com/news/security/cryptomix-ransomware-exploits-sick-children-to-coerce-payments/"
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c36ffc4-201c-49aa-8e56-4258950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:24:21.000Z" ,
"modified" : "2019-01-10T08:24:21.000Z" ,
"first_observed" : "2019-01-10T08:24:21Z" ,
"last_observed" : "2019-01-10T08:24:21Z" ,
"number_observed" : 1 ,
"object_refs" : [
"url--5c36ffc4-201c-49aa-8e56-4258950d210f"
] ,
"labels" : [
"misp:type=\"link\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
]
} ,
{
"type" : "url" ,
"spec_version" : "2.1" ,
"id" : "url--5c36ffc4-201c-49aa-8e56-4258950d210f" ,
"value" : "https://www.coveware.com/blog/cryptomix-ransomware-exploits-cancer-crowdfunding"
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c370102-93a8-46ab-8677-43a6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:23:30.000Z" ,
"modified" : "2019-01-10T08:23:30.000Z" ,
"first_observed" : "2019-01-10T08:23:30Z" ,
"last_observed" : "2019-01-10T08:23:30Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5c370102-93a8-46ab-8677-43a6950d210f" ,
"artifact--5c370102-93a8-46ab-8677-43a6950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5c370102-93a8-46ab-8677-43a6950d210f" ,
"name" : "scam-header.jpg" ,
"content_ref" : "artifact--5c370102-93a8-46ab-8677-43a6950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5c370102-93a8-46ab-8677-43a6950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A B A L C w s M C x A M D B A X D w 0 P F x s U E B A U G x 8 X F x c X F x 8 e F x o a G h o X H h 4 j J S c l I x 4 v L z M z L y 9 A Q E B A Q E B A Q E B A Q E B A Q E D / 2 w B D A R E P D x E T E R U S E h U U E R Q R F B o U F h Y U G i Y a G h w a G i Y w I x 4 e H h 4 j M C s u J y c n L i s 1 N T A w N T V A Q D 9 A Q E B A Q E B A Q E B A Q E D / w g A R C A H C B Q A D A S I A A h E B A x E B / 8 Q A G Q A B A A M B A Q A A A A A A A A A A A A A A A A E C B Q Q D / 8 Q A F g E B A Q E A A A A A A A A A A A A A A A A A A A E C / 9 o A D A M B A A I Q A x A A A A G o A A A I k A A A C J B B I A A A A C J B B I A E S B B M S Q i V I E g I k Q k A E C Q A R I A A A A R I A A R I A A A E C Q i Q A R M E x I R I I k I E g A i Y k A Q k R I A B C J W J B E g B E h E g A A A A A A Q J A C J A A A Q J A A A A A E I l U S C J I k C J A A A A E S A A A A A A C J B B I A Q F A Q k A A A A I k A A A A A A A A A A A A A A i Q A A E C Q A A I k A A A A R K A s I l Q A A E S A A B B I A C J A A B B I A A E S A I k E S E S A I k A A A C J A B B I A S J F A E E g R I A P b r M 5 o j O a A z p 0 R n R p D O a J M 5 o S u c 0 J M 5 o j O j R k z m h J n N G D P a I z m i M 5 o j O a M J n t E u c 0 R n N E Z 0 a U G f G k M 5 o j O a E m c 0 Y M 9 o j O a I z m j B n t G D P a M G f G j J n N E Z z R G c 0 R n R o y Z z R G b O i M 5 o w Z 7 R G c 0 Y M 9 o o z m i r O j S 4 j z I J I J C A o A A E S A A g S A A A A A A A Q F R I A g h Z A B E g A A A A h I i Q R I A i R E g R I h J E h 26 u T r A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D F 2 s Y 5 g A A A A A A I k C I S U i Q A h I A A A A A A A I J A A A R I A A A A R I i Q R I E B Q g k A A H b p Z u m c V v H Q P D 0 y u k 0 L Z n Q d b g 8 j U Z 1 D U Y 3 Q a L I 9 z Q Z Q 1 W Z 6 n t 0 c H m a f O 4 j u 986 T Q Y + m e r K u a T P q a T P 6 z 1 A A A A A A A A A A A A A A A A A A A A A A A A x d r F O c A A I T C o k A A A A A A A g K A A A A A B E o J A A h Y g C J A A A C J A C J E J A A i E l A A A d m t k 6 x n d f s M q d Q Z 1 u 8 c P n p D O a I 4 P L U G V b T G K 1 P I 8 e r 2 k 4 I 0 B y e W g M + e 8 Z / f P i c X p 1 e p w + O o M 3 t 9 Q A A A A A A A A A A A A A A A A A A A A A A A A x d r F O c B E g A A A A A A Q F A R I I m C Q A A A A A R M S A A A A A A A h E q A A A A A A A A A B 2 a 2 V q B Q l 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U F 1 B d Q X U k v i 7 O M v O B E g A A A E i R Q A A A Q Q q Q A A C A o C J i Q A A Q E h E g i Q Q S B C Q i Q A A A A A A E B Q O 3 S z d J K k r C R C 4 o v B V a S i 0 l F p K L i i b F F 4 K r e R d a C F p K L i i n q V X q Q u K P P 3 K L i i 0 l F h V e C q R C 4 o u K L i i 4 o v B U s V X F F x R e C q Z K r 1 I X F F 6 k F i q 4 o u K L 0 L 4 + x j p z h S B I A C J E S A A A A A A A A I k A E J A A C J A I k A g K A A A R I A i Q A A A A A E E g A 7 N P N 0 k j w 95 X G j R u e f F p e J x d n v J m x 2 + h 58 m h Q z f b s u c F N G T O v 2 S c H l r e Z 539 f A 5 a a d T O n p 6 D P 6 + i x z 8 X d B n e 3 b c 4 P d 1 H H z 6 N D g d V z m 8 t K p m + / Z U 479 d i c z X 5 z k j v 8 C 3 L o D O n t u Z n R 0 1 P D y 0 I O O 3 X 5 m d 3 e v s Y 9 v f 1 O K 3 d J 5 c u p 5 H j y 98 H H 7e8 n H 56 H o Z t d T m j i v 3 + t e P R E i l 6 F 8 f Y x 0 54 k p E g A A A B E g A A A Q F A A C C U S A A A A A B C J U R J E g A A A A R I E B Q A C J A C J A J 2 a e b p E c / R V c 90 W O H 16 b H J 283 U Z 1 u k O b p s Z / f F D h 0 f f x O b x 7 q n H 7 d l C O f p 8 z k 76 y U 5 t H n P H 19 f M 5 v f 26 j h z 9 n 0 M 6 N M c H P r S Y n b 3 D H t r V M q u y M u u s O f k 0 x y 8 u o M f q 7 h j 21 L G S 1 h j N k c f P q D I 7 O s Z / l q j C 7 d C p y e G n J m V 1 U Y 866 s v q 6 h i d e g P D 3 A B S 9 C + P s Y 6 c 0 i p r I A A A h I A A A R I A h I I J A i Q A A A R I T A A A A A A A A A A A A A A i S A o A A H Z p 5 m m k e f p Z c 6 / c M 2 / e M / 0 7 B n 27 h m N M c d O 8 c 3 J q D i j u H j 4 d o y / X v H B 5 a g 8 f H s G a 0 h y d Y A A A A A A A A A A A A A A A A A A A A A A A A K X o X x 9 j H T n C g g K A i Q A A A A A A B E g A A A A E B Q g k A g k A A g k g k A g k A A A A B E g A g S A H Z p 5 u k k W r 4 r 7 W x P Y 1 I 4 K m h f F 6 D R n L 9 T v j G 6 T v t l w a k 4 m m d D J k 1 X N w m u x + w 62 V J q x l e 53 s T 3 N N n w a T K q a 7 G u a s 8 f I a 7 H k 12 S N X y 5 P Y 9 v X h 5 j X j L 8 T Z V y j Z Z X Y d L O 5 z Z Z X U d b L u a M Z U G t X l 8 D S t h 9 x 3 R l S a k 4 e i d L g 8 T X Z v Q d M Z f u d t s n z N p 5 + g A p e h f H 2 M h O Y K A A A A A A A A I E g A I i R Q g S E S E S C E k T E g g m J A A A A g m Y B E o C g A A A A A C C Q A d m n m 6 S R S / O v q z a n d 652 g e X r 4 c x p M 7 s J 9 O H w N K 3 D 5 G n P h w H f P l a O i v D N n f P F 0 r T 3 z x 3 W 5 + c 6 / T h 8 z R v x X L + 2 X 6 n b O f Y 7 + b n 9 z o j g 7 S 1 s z 0 O z 3 y e s 6 P D j 6 D q r 4 e M a F s n r r 2 v x d J X 0 4 a n f f x 5 Y 7 X F z 1 o 9 H D Q 7 p 8 v E 66 c Q 0 Z z r n T 0 e P u R T 0 H n a w 87 y K V 9 Q A A p e h f H 2 M d O d E q I J i Y J B E h E x I A B E g i Y J A A B E h E o J A A A A T E k J W g A i J K A A R I B E g R I A A A A i S R I s S A g 7 d P N 0 k i 1 b K A A A A A A A A A A A A A A A A A A A A A B E W A A A A C l w A A p c A A A A A A A K X o X x 9 j H T n A C g A E S A E S E S A A A E S A A A B E T C p I E g A A i Q B E g A A A A i Q A A A A i Y J A I J B E h 2 a e Z p p H N 0 1 X M t o e J 5 + f f 4 H g 6 b H N 59 Q 9 M / V 8 T m 6 / D 1 P L z v J 5 + 17 H H a 8 n N 2 R 6 n F P V 4 n n 6 X 8 z 0 5 u y h y T 1 e Z 5 x 0 S T y a H M e F / c c t / e x w e v p Y v w 6 P g c / p 7 j m v 6 + Z 6 e H f 4 H j f 2 u c H t e h P j 1 + Z f y 9 f I 5 d D z 9 D n t e h 4e9 R 49 F v Y 5 u b Q 8 z y 6 v D 0 P C v R W H P 10 s 8 q + / o s d F L g C l 6 F 8 f Y x 0 5 p F A A A A E E x I A A i Q A E C Q Q k A E E g A A A A A Q k A A A i Q A R I A A A A A A A R I A 7 d L N 0 k j n 6 J X K n T q Z t d a p x e n v c y 6 a F j O 7 v e 5 m 9 P R J j 21 B z 8 u m M m N S 8 c v h o W s y 40 r r k e m h B 58 / a O B 3 y c H l r e c U 4 d a t Z V t G T M 6 / T 2 M r 17 b G X X U s Y / R 3 W O K 3 X B l 9 n t 6 G P b T g 5 u b W 8 z h 8 d e h n t O p z 8 e t U 8 O f R q Z l d e h n 11 e U 5 f X t s Z V N i i e H l o Q u P 0 d 4 u A A B S 9 C + P s Y 6 c 4 U A Q S A A A A A A A A A A A A A C J Q T E i a y A A Q Q q Q A I k A I k A i Q E E g A B E S U A A D s 0 83 S S L V L Z n + x 1 O W x 0 O P w N N z 85 o P D l N F m d x 6 u W D r e X i d b n o d b n q d T y 8 T r e M n q 4 / U 93 D 6 H U 47 H U 5 B 1 q e J 0 u T 0 P d z + R 2 u S T q c k H Y 5 B 1 u S T q c k n U z v Q 7 X h 7 g A A A A A A A A A A A C l 6 F 8 f Y x 0 5 w p E g g k A A B E g A A Q F A A g K I J A A A B E x I A I J A A A A B E g A B E g A A R I A A A B 2 a e b p J H l 62 X O a I 4 O j 3 H J 4 a Q 4 v b 3 H h z 944 v b 3 H D 56 Q 8 s r a H D X Q H P 5 d o 5 f L v G d 3 X H D X Q G b 6 d w 4 L d o z p 0 B 48 m i O P z 0 B x 36 R n W 7 x y e G k O K e w c v N p j j 59 Q c M 9 o 4 u 0 A A A A A A A A A A A A F L 0 L 4 + x j p z h Q Q A F R I E E g A A A B A U A E B Q A A C J A A A A Q i Z S J p C Q A A I C g A E S A B C J F A C O z T z N O y L V l a z m 95e2 P 6 G o 5 u A 1 b Z f Y d L F s a 85 I 1 m N 2 n X G N o n v b O 8 z W Z v s d c 41 j W n I 6 z r n K G q y a G z T N 8 j Z n E u a 85 f Y d A A A A A A A A A A A A A A A A A A A A A F L 0 L 4 + x j p z h Q A g K A A i Q A A E E g A i Q R I A A R I A A Q k A A I E g A A A A A R I A I k A A I k Q k R I I H b p 5 u k k W r Z f L 1 C k e g r F x W Z F K + o p H o K W k e P r I i n o P O 8 j y e o 85 u K r C t f Q e c 3 H k 9 R 4e0 g A A A A A A A A A A A A A A A A A A A A B S 9 C + R r 46 c 0 i x I A A I k A h E q R I i Q i Q R I A R I I J i Q i Q A A B E g A A A A A I E i A o A A g S A A A g k A g k H Z p 5 u k k V t 5 L z d P L o n B 7 + A 9 r 8 / Q e d K j 2 r 4 + h d H m d V K e Z e 1 K n p P n 5 H r N L R H r 5 U r p 9 e P 2 I i l
} ,
{
"type" : "x-misp-attribute" ,
"spec_version" : "2.1" ,
"id" : "x-misp-attribute--5c370126-546c-4bcd-93bd-4f69950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:24:20.000Z" ,
"modified" : "2019-01-10T08:24:20.000Z" ,
"labels" : [
"misp:type=\"text\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
] ,
"x_misp_category" : "External analysis" ,
"x_misp_type" : "text" ,
"x_misp_value" : "With people becoming more aware of ransomware, criminals are coming up with some pretty low life schemes in order to coerce victims into paying ransomware. Such is the case with a CryptoMix ransomware, who pretends to represent a sick children's charity and is asking for a ransom payment as if it was a charitable donation.\r\n\r\nCryptoMix pretending to be a children's charity is not new, but this latest iteration is taking it to the next level of depravity by including stories and information taken from legitimate crowdfunding pages for sick children."
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c2-4d58-4945-8471-4c68950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:42.000Z" ,
"modified" : "2019-01-10T08:26:42.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat@protonmail.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:42Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c3-40c8-4859-b3b7-4a70950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:43.000Z" ,
"modified" : "2019-01-10T08:26:43.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat1@protonmail.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:43Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c3-4950-4565-857f-4a71950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:43.000Z" ,
"modified" : "2019-01-10T08:26:43.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat@dr.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:43Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c4-89b8-40da-949d-4f80950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:44.000Z" ,
"modified" : "2019-01-10T08:26:44.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat@tuta.io']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:44Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c4-2460-465a-b459-495e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:44.000Z" ,
"modified" : "2019-01-10T08:26:44.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat1@yandex.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:44Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5c3701c4-6a0c-4826-8d25-4e38950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:26:44.000Z" ,
"modified" : "2019-01-10T08:26:44.000Z" ,
"description" : "Contact email" ,
"pattern" : "[email-message:from_ref.value = 'windat2@yandex.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-01-10T08:26:44Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Payload delivery"
}
] ,
"labels" : [
"misp:type=\"email-src\"" ,
"misp:category=\"Payload delivery\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:38:53.000Z" ,
"modified" : "2019-01-10T08:38:53.000Z" ,
"first_observed" : "2019-01-10T08:38:53Z" ,
"last_observed" : "2019-01-10T08:38:53Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"artifact--5c37049d-12a8-4fc0-a0d0-4b45950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"name" : "ransom-note.jpg" ,
"content_ref" : "artifact--5c37049d-12a8-4fc0-a0d0-4b45950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5c37049d-12a8-4fc0-a0d0-4b45950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A B A L C w s M C x A M D B A X D w 0 P F x s U E B A U G x 8 X F x c X F x 8 e F x o a G h o X H h 4 j J S c l I x 4 v L z M z L y 9 A Q E B A Q E B A Q E B A Q E B A Q E D / 2 w B D A R E P D x E T E R U S E h U U E R Q R F B o U F h Y U G i Y a G h w a G i Y w I x 4 e H h 4 j M C s u J y c n L i s 1 N T A w N T V A Q D 9 A Q E B A Q E B A Q E B A Q E D / w g A R C A J K A 9 Y D A S I A A h E B A x E B / 8 Q A G Q A B A A M B A Q A A A A A A A A A A A A A A A A I D B A E F / 8 Q A G A E B A Q E B A Q A A A A A A A A A A A A A A A A E C A w T / 2 g A M A w E A A h A D E A A A A d V 6 G s T 7 X q K X M 0 u r v K S / t A u V V m l G s u V Q N H M 9 t T 5 D p 3 l 2 U s V i x X I k q m n e X R q t Y s r W C C Y g m I J i C Y g m K 1 g g m I p 9 K 1 g r W C t Y i t Y K 1 g r W C t Y K 1 g r W C t Y K l g r 5 b w r 5 Y K 0 x D s h z s p F f L e F f L e F f L B W m I d l 0 4 n 0 r W C t Y K + z L B P p W s E E + l a w V 8 u y y 39 o S 28 h E s 7 m s O M b l 6 d f a O X O i O X s u l p d v N y u y x M + g X l d q I S 6 K p y 6 R 70 V d s 4 c r t V W s F f Z 8 J 1 S 4 U S t F H b h n n a E e r I 96 O O j j o 470 i k I p C K Q i l w 46 O d 6 A A D o 46 O O j j o 46 O O j j o 46 O c l w 5 y Q j y f C P J i C Q j P n T o O O i P J 8 I 8 m I J D k n Q d O O j j o 46 O d A B 3 g 7 V Y l r W C v s + l f L R n a G d Z + 6 B m l f y o C 5 r 2 Y 9 U u O 2 o b e w G b t N p f b R b V E q E a Z 5 N N W Z d G C L 1 c y x T U e j 2 q d V X 5 r 4 k i q S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J V y g Q C Q 24 t U s 0 c x r V R z b 2 O 6 y 5 R X L r U x 3 N H P O 1 l 6 u E X q u l i i R Z 2 i Z Y p 6 W q o l 7 P Y W K U t v a J 2 W P K s s 9 F T 5 + d + t y r l z e p S 3 c x 3 W X q q D Y z z L W b p f 2 i R a y w r Z 3 P n T e x X 51 e z 5 Y 9 J g 17 l i t F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Y r F i s W K x Z V 2 B A W Q 0 5 t U t M d A r o 0 W 4 u O + c d K a t s i r B 6 j U 8 v d c I c s R X 2 Y q 7 Y q m c 0 U S t V X T q R g 12 K p 5 e y p 7 a r L H Y q v N t R h 0 X C q n W P N 2 X K h T p R j 0 z R n r 2 C m V i s 3 N S q c P q M 3 F f c K c v o C m c 1 k E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E I X V l Q s h t x b Z V N 0 M 6 x d 1 X 2 Z l 0 z z t G j h C + M g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B T d S Z x r M N u L b K p u r z q 6 U Z W A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T O N Z h t x 7 J V N 1 e d z y 6 Y M w 7 Z y s 8 r Z n K N M E p u j c s L O x K Y 2 z K L u 2 G J b E 5 d T r K s 2 q g q 0 c H L Y y K Y W C w k Y 7 J y K + 9 s K I w 0 k K 7 + J C 1 a s g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T O 61 m G z J r z V d l M 3 o l C d y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A p u p K H V z D X l 1 S o T o m 7 O 1 r m U 8 n o E K 5 Y D a z 8 N V N 9 E d l f k s 0 T h a u X k J w n y i z Q l k X T z L v i M J 0 W W y y 6 l u r j S W w 7 U a O Z 4 m v u W 0 v h 3 K X s 1 h Z d T I l 3 N Y X 0 y x G 2 y v h x n 4 a o w t O W 18 J V E c u p u s 7 G 7 E t 0 s o 1 z l E z W Z r y 2 v t J f n 5 W b O U R N n Z w L A A A A A A A A A A A A A A A A A A A A A A K b q S o W V b M G 8 R l l z v Z K E 7 k A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B T d S U K W s t + D f K K M 60 y x 12 b Z + W P Q n 5 c I 9 W O L L Z 7 j y N S 7 H l z P S e R I 9 V 41 x u U 8 N j L Q e i 8 i 0 9 I A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C m 6 k x j e O b 8 G / O h j z v d K E 7 k A B C Y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A U 3 U m Q b x H f g 350 M 2 d a 5 Y 4 W b Z e Z 0 9 C X m R j 1 W b H X q v F v P T Y 6 I 9 N h q s 9 N 5 s F 9 W v J Y a J 45 m l j o P T e f 6 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A p u p M g 3 i O / B v z p G E M 70 S 5 O 5 g m K l o p 7 a M 1 l o 5 C w V L R D l g q n I Q 7 I V L R C Y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T I N 4 j v w b 86 r c Z 6 X y o r u N b B I 2 s M T 0 G K o 9 J 52 w t V V m l i k a w A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T I N 4 h 6 H n + h n V c Z M 9 O 9 s l c Z 2 g Z J a R n h r G T T I U x 0 D L O 8 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T I N 4 h 6 H n e j n V X J s 9 L Z V c u L m W R o Z J G l m q N y g X q e l q N B p V W g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C m 6 k y D e K / R 870 c 2 n l z P S r m m V z h 7 t G G P o D H D e M f N o y Q 3 C G X a M 2 k A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A F N 1 J k G 8 V + j 53 o 5 u e O p n r 2 c Z X B C Y V z O o R L V V o A V 2 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C m 6 k y D e K / R 870 c 3 N H W z 1 z 17 p X H l v U H l Q 9 h G P N 6 q v J n 6 E j x b / U H k S 9 U Y L d Q 86 n 1 x 5 v p A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A p u p M g 3 i v 0 f O 9 H O s 1e1 j r 2 c Z a 5 k Z B G Q A A A R k A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T I N 4 r 9 H z / Q z q l P u e l V e u V x 53 d 48 + P o I p z b u 15 u j S M E 9 k z z b t c S i y 7 p l o 3 D J 6 E J g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C m 6 k y D e I e h 5 / o Z 1 V X b z H W 6 c J 65 g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T E 43 h 6 H n + h n V U L O Y 6 R 5 b f r H n z t 4 V S l 0 5 a k Z q 7 x X 2 z p 3 L s r K Z L S t e I Q 0 U i 2 H S h b M o t k M c r q x 2 y Z R o 5 w y 8 t F N / L z J Z Z w r h d I O 2 F e X X U L Q p W y M / b x T D T A q q 2 Z y 2 f L j E t i W z q v M E d M C r t k i v t s S i 2 X S u v X W T 5 G 8 k A A A A A A A A A A A A A A A A A A A A A B T d S Y R v D 0 P P 9 D O q 49 j j p o n C e s A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K b q T C N 4 e h 5 / o Z 1 D k e Z 6 X 5 t O O 4 u 5 X M l 2 i 8 R j E 0 c h Y T 52 s h b l v J w n j N P e S J w V E 7 c O s u y 25 i 6 y i w n V K B O N P D f m t y m w F X K O m m u / K a K 80 i 6 / F q J T j I o 7 y R 3 n K S y 2 q R O P K C d u W Z b y m J u 5 G 4 z 8 q F 8 s 1 x Z H l B c 5 A v 7 V I 5 z l R b P N e S 5 n k a e 12 l g A A A A A A A A A A A A A A A A A A A F N 1 J h d b x z 0 P P 9 D O o I R z 0 1 S j K 4 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A U 3 U m I b w 34 N + d G e G e m 2 U Z X A A A A B z h J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J z o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A p u p M Y 3 j m / B v z o z w z 0 2 y w 4 r j 23 k y P U e X W e w x Q P Q Z / M P a h j 2 A B w d c H Q A d c H e A A A A A A A A A A A B P u T K e r D z c x 7 z y Y H s q r Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B T d S Y 3 W 8 R 34 N + d F M c 71 S j K 5 A A A A 5 C Y g k I p C K Q i k I 9 k I p C K Q g n w i k I p C K Q i m I J C K Q i k I p C K Q i
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:42:34.000Z" ,
"modified" : "2019-01-10T08:42:34.000Z" ,
"first_observed" : "2019-01-10T08:42:34Z" ,
"last_observed" : "2019-01-10T08:42:34Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"artifact--5c37057a-2bb8-4641-9304-1c12950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"name" : "email-correspondence.jpg" ,
"content_ref" : "artifact--5c37057a-2bb8-4641-9304-1c12950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5c37057a-2bb8-4641-9304-1c12950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A B A L C w s M C x A M D B A X D w 0 P F x s U E B A U G x 8 X F x c X F x 8 e F x o a G h o X H h 4 j J S c l I x 4 v L z M z L y 9 A Q E B A Q E B A Q E B A Q E B A Q E D / 2 w B D A R E P D x E T E R U S E h U U E R Q R F B o U F h Y U G i Y a G h w a G i Y w I x 4 e H h 4 j M C s u J y c n L i s 1 N T A w N T V A Q D 9 A Q E B A Q E B A Q E B A Q E D / w g A R C A H B A s w D A S I A A h E B A x E B / 8 Q A G w A B A A I D A Q E A A A A A A A A A A A A A A A Q F A g M G A Q f / x A A W A Q E B A Q A A A A A A A A A A A A A A A A A A A Q L / 2 g A M A w E A A h A D E A A A A e g a K 4 u F T 6 W q p n E L D n 451 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 D l x 1 E z i + g O g A A A A A A A A A A A A A A A A A A A A A A A B h 57 F M s J 2 s 1 Z b x w 8 f r / T j 3 Y D j 3 Y D j 3 W e H K O s 1 H M O q x O X d X t O P d b i c o 6 v w 5 V 0 + 45 J 1 e B y 7 q 8 D l 3 V D l X T + H M u k m H H u w H H u w H H 9 B Y S C Q A A A A A A A A A A A A A A A A A A A A A A A D R U X w 510 M M g 2 s T 0 0 a p f p p x k e E T f t 0 k z V 5 i S Y O 8 Z x t v p l A m + G x g M 9 f v h p 3 + e m W j b 4 Z x J I i T s B l o 2 + E i T X i w A A A A A A A A A A A A A A A A A A A A A A A A A A B h X W k A z 5 f o + c I Y A A A A A A A A A A A A A A A P o A A A A A A A A A A A A A A A A A A A A A A A A A A A P M c K c v q z y P G f v n t e e 4 W h W e 5 a D d 5 v 3 E H L R v Q F P c T 1 I s C n X A p 1 w K d c C n X A p 1 w K d c C n X A p 1 w A A A A A A A A A A A A A A A A A A A A A A A A A A A P I s i E b U j w i 7 f d x H z 0 7 j P V v 54 u d 3 N j o t V E O h w o R f Z 88 O k 2 c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o c u O o U N 8 A A A A A A A A A A A A A A A A A A A A A A a a i 9 F B 50 G s r M r H I g R 7 k Q e V 7 i j O b d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A O f d A K / s K e 4 A A A A A A A A A A A A A A A A A A A A A A A A B B J y v F g r x Y I c w A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 1 R J e s 804 Z m / k O s 5 M j g A s O w 4 / s A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D x r r C 39 q J 5 I V e J b I 0 Y s V V m W S H H L R H h l q q v S z 80 R C z 9 r c i e j 1 x d e V + o t U a E W 3 t R N J W N Z g W 6 F q L P y F i W C p 2 l i r f C y 9 h 6 S x 9 i R y y 9 q d h Y o 8 Q t P I H h Y g A A A A A A A A A A A A A A A A A A A A a c s D 3 L 3 w 1 Z 54 n s K f G M / N v o 0 7 v D 3 H L w 1 N o y 88 w P G w e + a 8 z z D f p N 2 v 30 w 2 + Z m j 3 c N e u Q N G z M R s J g i Z S R r 1 y B h h u G j X L H m r c I / u 8 A A A A A A A A A A A A A A A A A A A A A a Y d k K b Z a i B q t B F w m i p W w i w r f E q N t o K j O 0 F V 5 b C D h Y i n 3 W Q q l q K v y 1 E K b j B L B X i w V 4 s F e L B X i w V 4 s F e L B X i w V 4 s F e L B X i w V 4 s F e L B X i w V + 4 l A A A A A A A A A A A A A A A A A 1 R 5 E f c w 26 M t T f j q y l y a 8 r P f M M j N j i Z + 6 s T f 7 p z j 3 b G z M v d H t b T C M / N G d b s P M T H k u q 5 X F D N A A A A A A A A A A A A X F P c H U A A A A A A A A A A A A A A A A A x 0 + x i w U 4 u F O L h U + l l C x g h z 46 B z 46 B z 47 C w 5 / o A A A A D z R I E d I E d I E d I E d I E d I E d I E d I E d I E d I E d I E d I E d I E d I E f P a A A A A A A A A A A A A A A A A A P G E U k t O w z 91 D Z 60 G 2 k u f D h 3 c e H E O 58 O H d x r K v o I 2 s m t X h u Q 9 J Z N H p u Q d x I Q 95 t a s C Q j 6 C e h b C S 0 5 m a D u J D V 4 b k b 0 k I u R I a N R M R v S Q w 1 E h H x J S J 4 T G r I z a Y x P a 8 D e i 7 T a 0 Y k l E 9 J T X r J C N i S 0 b 0 k I u 8 z a P C Q 0 + m 1 p 8 N 6 H m S W r E 3 g A A 1 a Z Y q c r Q U + d q I u m w F W t B E S x B j W 4 r 8 L M V y x 8 K 6 T v y K z Z P F V O 3 i A n i q l S 8 S u 9 s h H j W I q s 7 I V c y Q I s e y F Z M 3 i D q s x X + z x W + 2 I r s p 4 i x L U k H O W W L r n C q m y B V r Q R o t m K 1 Z C t k S h B j W 4 i a p / p B 0 2 g q s 7 I Q N 8 g V m d g K 2 R I y K r K y 9 K 1 Z C t m b M g A A D T D s Y h j s 83 k L K R 4 a M 88 y I k 6 T z D 3 e R s t / h K 91 b Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D G F K o S W 5 c d Q 5 c d Q 5 c d Q 5 c d R P 4 i 7 O l A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A h S o B Q u o w O a d L 6 c y 6 H M 5 t 0 O 0 5 m + 3 + k p E 9 J T R v A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A M I c 4 Q M L L 0 r N k 4 Q 924 V + N n 4 R Y 1 j k V G 2 x 9 N W 4 B g Z v P Q 8 H p g Z g A A P P Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A D V W X G k h e y / S D r s P S B 7 P x I U n Z u I 0 e X m V m c 7 w h 5 y s y P 5 L 0 E R P 1 k b G f o N k S y j k f C Z m Q s Z 4 i 4 y N h A 2 S s C S A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A x 8 M w G I y A A Y 5 A w M w G O Q Y Z g B j k G P h m e H r D M M M w Y m Q D H I M B m w G b D M A A A A A A A A A A A A A A A A A A A A A A A 0 Q r P w q Z k j I q t k 70 q 85 n p D x s 8 S v y s M T Z U 23 h X Y 2 A r Z E z w j a p n h A 9 s t Z A y s f C s 8 s 8 i q x t R X z N v p F h 2 e R A w s c i r 9 s v S t y s M T T A t N h E b x r l a t o A A A A A A A A A A A A A A A A A A A A A A B r i y I Z L Q R J y j y z H O H L P G j E l a d G Z K 8 j 6 o m e 68 a z y h Z F j r z x N P u r Y Y + 6 M y b s j S Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A x q i 3 V g s 1 b 4 W a F m S k H E s F b i W i v F g r f C z x x r C 3 U 0 s n K 6 w P Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A a / N o j 4 y h D 9 l i H t 3 i H t 3 i L n v E R L E R L G E a Y I m 7 a I + / 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A f / 8 Q A L h A A A g I B B Q A A B A U F A Q E B A A A A A Q I A A w Q R E h M U F Q U Q U G A g I S I w M y M x M j R A J H C A / 9 o A C A E B A A E F A v x P 8 R p R v T o n p 0 T 0 6 J 6 d E 9 O i e n R P T o n p 0 T 0 6 J 6 d E 9 O i e n R P T o n p 0 T 0 6 J 6 d E 9 O i e n R P T o n p 0 T 0 6 J 6 d E 9 O i e n R P T o n p 0 T 0 6 J 6 d E 9 O i e n R P T o n p 0 T 0 6 J 6 d E x 8 l M j 6 j d / F j C D J u 42 y b E B v y A V Z 2 m R / P 9 C + F f U W X c q o F T r p x d W v a a V J F Q U 5 H 8 / w B C + F f U W I V V y q m M V 1 Y / I 4 u K 9 n R x Z 0 c W d H F n R x Z 0 c W P i Y a B M X D e P i Y a D g w d F x s I j r 4 P G m J h v O j i w Y e G Z 1 c L e M X C L v i 4 a T g w d F w 8 N g M X C Z k x 8 J y + J h 1 q + P g o j 4 u E k s x c O s C j B M F G E T w 4 W v R x Z 0 c W d H F n R x Z 0 c W d H F l V F V P 1 G 7 + H k W 2 l 2 H M 36 Z T x 7 C w S t 7 F a L p o y i s v Y p K 6 E O v G 11 i 1 J S 6 a X 2 L U m q 6 V 7 b H H 5 Y + P q S 5 G + g I H Z Q M h V C 5 O 6 t H B 2 y j T R V C 3 V b Q 125 r N P 0 / m w y N T D U Q E c b x / s f W n y 8 e t u 9 i z v Y s 72 L O 9 i z v Y s 72 L O 9 i z t Y f J 3 s W H N w 2 n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x Z 3 s W d 7 F n e x f q 7 b t t d l 25 M l H O W 2 / I + 1 + u d E p u 35 e / s f a 4 Z T 8 r c K m 6 z z c e e Z R P M o n m U Q / D s Y T z c c z z K J 5 u O I P h 2 M Z 5 l E 8 y i e Z R P M o n m U T z K J 5 l E 8 y i e Z R P M o n m U T z K J 5 l E 8 y i e Z R P M o n m U T z K J 5 l E 8 y i e Z R P M o n m U f V 7 d O O s c b 89 n H u t S N c y H s X I m R y i p R Z u y R r k 12 G u m t r 2 G V / r o v 9 f n t 5 e W + G + 4 X N d d H u u l T 2832 O R r F x q E b r U b j j U F k o O q 49 K q M a k K t V a n Y u / g q n X p 2 s q u r V V t O t R r w 16 d e n c 2 P S z G m s z Y u 77 H d t q j K m 9 d 29 N R c u / U a 25 B r
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c370585-a444-4c22-8c9b-497f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:42:45.000Z" ,
"modified" : "2019-01-10T08:42:45.000Z" ,
"first_observed" : "2019-01-10T08:42:45Z" ,
"last_observed" : "2019-01-10T08:42:45Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5c370585-a444-4c22-8c9b-497f950d210f" ,
"artifact--5c370585-a444-4c22-8c9b-497f950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5c370585-a444-4c22-8c9b-497f950d210f" ,
"name" : "onetimesecret-message.jpg" ,
"content_ref" : "artifact--5c370585-a444-4c22-8c9b-497f950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5c370585-a444-4c22-8c9b-497f950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A B A L C w s M C x A M D B A X D w 0 P F x s U E B A U G x 8 X F x c X F x 8 e F x o a G h o X H h 4 j J S c l I x 4 v L z M z L y 9 A Q E B A Q E B A Q E B A Q E B A Q E D / 2 w B D A R E P D x E T E R U S E h U U E R Q R F B o U F h Y U G i Y a G h w a G i Y w I x 4 e H h 4 j M C s u J y c n L i s 1 N T A w N T V A Q D 9 A Q E B A Q E B A Q E B A Q E D / w g A R C A K o A p U D A S I A A h E B A x E B / 8 Q A G g A B A A M B A Q E A A A A A A A A A A A A A A A I D B A E F B v / E A B g B A Q E B A Q E A A A A A A A A A A A A A A A A B B A M C / 9 o A D A M B A A I Q A x A A A A H 6 D y f W 8 H l o M 3 e G z Q r q r T 63 g e 774 a h o x A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A P B 97 w e W n N 6 v l a u O r R 5 v s e P f L 3 f C 92 + d Q 0 4 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A H g + 94 P L T m 3 Y X D Z 6 X m g 93 w v d 98 d Q 0 4 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G f Q l y t S e s r U M t 81 g X y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 53 E b K v K s P X h R S e g x 6 i T z + m 9 n i a m G 0 0 s k j S x S N f M 1 p O W C 400 w x n q s Y 2 M 8 D W y R N r M N L P o A A A A A A A A A A A A A A A A A A A A A A A A A E Z Q P O l t G K n 0 h 5 f s 12 H m V + k j y t O 7 l e P f 6 A 8 u f p x P I s t 0 F P o Q m e N f u k Q 8 v 2 O G H m 4 W e b 6 W I z 2 e j U Y H p R I 3 w m A A A A A A A A A A A A A A A A A A A A A A A A A H B 1 E k k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R E k R J E S R 6 v Q c r s r Q k W K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I p C K Q i k I y 4 S Y V X Z W k v L 9 T O u f T n 1 F F a 0 t x b 6 C G i n R G R d C q 7 O a T P F O I 9 W V V f k 2 G e N k 4 o 5 Z G n L e F 2 f V n K 5 W Z y y N w t z W C i y z C a k L i i 2 s J y i L e W m C 66 o l P P t M M 7 I E e W Q J W 5 d x m p t E 4 X 0E420 n O R s O W p m K 2 Y 7 R r r K t N F 5 l n N F P J y q r T R r L A R C T C q 7 K 0 l h 3 U L h 76 F R m b q C / z / S q M t l 1 x 50 P R r K o 6 e k M n o c M D d U Z 9 U 7 D y b N t R V O + R h t s k Q z e h S Z b 9 A w V 6 b x X o i Z K 9 M z H P d A z w 2 U l E N s z H L R Y Y 7 r Z n l W 7 J G H R I Z G 2 J R T u G G + 2 Z i 7 t i V p 2 n j 376 z N P T E 5 k 9 C J h b 4 R g 76 V V c z + h w x R 29 L A A R C T C q 7 K 0 l 4 v t d X w + + 2 P H 57 I 8 / J 7 c D y q v d H h W e y P H 57 I 8 m P s D x d H p D y 8 v v D x X t D x 3 s D D 5 / v D x J e t M A A A A A A A A A A A A A A A A A A A A A A A A A i E m F V 2 V p L v P P X 0 W K B 6 D L S e g 8 v W a W G w 1 P P v N L z r D a y j U x W G l T m N 7 B M 2 M Q 2 s Y 2 M U D 0 G W B t Y R u e f M 2 s 9 J u Y O m 5 j 4 b W f E e q x w N 7 B p L n n T N z N Y W s A 3 s 9 R t Y r D S 8 + R u Z 8 R 6 r z 9 Z a w D e 87 S a H m 3 m t X m N r F S e m x W G k A E Q k w q u y t J Y 9 n l r p j T 0 35 K 7 h o w 2 F 1 d d x X p w j V T C 0 0 U V S J 8 r G m G X Y Q t y 3 E b M n T X T Z Q a K 6 e H o V c y m n u f p c p 4 a I T z m q m F w n l 6 b 6 K 6 D V V G 0 s l 51 p u z x u K 7 s t h 2 z D Y l s + Z V 2 V Z 5 l 9 m T W S q y 9 L 7 s U i + u N h P U G P m 0 U Z v Q G e G s Z Z 3 g A C I S Y V X Z W k s + j q 0 L x R b I U x 0 C u U h m l e K 43 C E b R X X o F F s h V 2 w V R v E Y 2 D N Z a I V a B m t s G e V w h X e K V w p h p E a r x W s G e O o Z r 5 C t Y K o 3 i m V g y 22 i i V o q h o F M d A z X T A A A A A A A E Q k w q u y t J Y t v m y 6 u 4 b a 1 c z 1 m r k a j X 3 z 9 x B 3 O b u 4 N J L m b h v q 5 i N 0 8 A 9 C l U a O Z u G 2 X m 7 C E 81 p Z C u J r 5 i u N d H c R v j l s L p 56 D c x 3 F n a 6 o 1 d y d r R f 5 t x K y m o 2 V b P O N N 3 n a C y z D o i c M c a 9 B H I e j X V Q a + + d Y b O 49 R C T M b 5 e d o L K 6 J G y u r O b u Z + m 8 A E Q k w q u y t J Y d 2 d a + T 4 R k q N e b X h L o U X k r 67 j N N Y Z J 2 R J 0 6 s 0 L K 76 p 7 L p V G d h l 1 K i 2 u + g T h o M 1 n L S l P h V O u 4 t p s q K m i s r l 2 w q v 5 I p t q s J 5 d E C E 67 T l N 3 S M Y 3 E Y y E o 21 F m b T w q 7 C 4 j V X Y X U 64 F P V q d y b 6 V o 25 t Z I A A E Q k w q u y t J d 5 W t q M g Z T U q F q v h a p i a F V o A I k g E Z A A A B G Q A A A I k g A E Z B E S A I E 1 d g A A A A A A A A A A A A B E J M K r s r S X j + x 1 f G 57 Q x U + m P H j 7 R P N 9 C R f F 77 I z Y v W H h 2 + u M O T 1 O n l a P R H k X + g P H e w M N H q j x 4 + 0 P F e 0 P I q 9 w e L u 2 D y M / v j z N F 1 p 472 I H k d 9 k e P R 748 j V t H j U + + P I q 9 w e R H 2 R T c A A A A A A A A A A A A E Q k w q u y t J d 5 m X U z 5 D 0 2 K 0 0 M 9 J u Y b D U 84 e i y Q N z G N j D Y a n n X m p i t N D z + m 9 j k a m E b m K J v e b c b H n j 0 G b S A A A A A A A A A A A A A A A A A A A A A R C T C q 7 K 0 l X Z 1 c 8 r h j 5 t G e v Y M 8 r k Y e b 1 Z O 6 h l q 3 j L f M Z Y b R l l o H n z 2 j B d p F N O w Z q t w w x 9 A Y p a x i 2 g A A A A A A A A A A A A A A A A A A A A B E J M K r s r S V F / l r 6 V c M 0 e m 8 a V e u y Y j 2 I + J I 9 t 4 v D 2 Z e R t N U f L k e o 8 e g 9 + P k V n t R 8 z h 7 H f H p P e Y / P P Y Y b Y 2 d 8 S d n s R 82 C + u 8 S B 70 f G 3 G 0 A A A A A A A A A A A A A A A A A A A A E Q k w q u y t J d 51 Y T A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C I S Y V X Z W k v P 9 D I t m T X 0 p t q J b T d W s b e 1 x H s 41 V N I 5 L t p j 0 I H J 9 E Y 12 l f Z S I S n Y Z e z 4 R s 7 M y S t g W 1 a K y F a 4 t x a a S X J V k t F N p R o r u P P u n E u z 6 q C N k Y H J y m l P b i q p 0 G v L p p I X d q J V 2 y K u 12 F V l l J L v Z J y M q V S l w 5 b y Z e A C I S Y V X Z W k u 86 u P P 6 N R j s 11 H c + 2 o z 6 O W G W G v h l 5 u 6 Z O a O m X m / K T r 0 w M e v t 550 + b D z 9 s r D y L t s T u D 0 B i l t r I 59 t J Q t 6 U R 12 G a F 0 z L Z L Q Z q P S i Z e b a T D 30 I l E r e G W O + s Z v S g e f z Z M x N s D D u n M w 818 M n d 1 B m 7 r k Y O 7 o k a t V J m s v s L Q A A R C T C q 7 K 0 l 4 n t x X y o + 0 P H e w P B 9 H a P M 0 a u n i T 9 g Z M X s D H 53 u j y N O 4 e J L 2 R 4 + 2 + w 8 b P 8 A Q j x 5 e s P F 9 a w P K 9 W B 5 E / X H g W + 0 P N s 3 D y O e w M e P 2 C Y Z b C + N V 7 w 8 u / R a e H Z 7 A 8 i H t D w / U 0 A A A A A A A A A A A A A C I S Y V X Z W k u 8 x L u U Y z 0 3 n d P Q Z o m t 50 z c z 2 F j F I 1 s E z Y q p N b z h 6 L z u n o M G o t Y 6 D 0 1 O U 9 B j g b 2 S o 9 B T A 0 s E j a w y N j B I 2 s V 5 c w 9 N r L S e g w S N r z b z W 8 + 41 M P D e x 8 N r C N z F M 1 P O 0 G l i t N D F w 3 M V R 6 T n Q A A A C I S Y V X Z W k s m v q 56 d w x Q 9 A V V a h h 5 v G e / o z c 1 D B P Y K a t Y y 17 h h n r G W 6 w Y m 0 V U b B j 5 t G K W s Z + a R h 7 t G W n 0 B k j t G X u k Y 2 w U R 0 j F 3 Y M L c M G q 0 Y 2 w Y N N w y 81 j N b Y M 1e0 Z r L R g n s G W G 0 c 6 A A A A E Q k w q u y t J V W + S v q V w z R 6 b x r L P V j g o X 0 5 Y e n o P B u P Y e H u N 1 e X K e w 8 L p 7 U s O E 9 t 4156 b y O H s P F k e w 8 W w 9 W G f C e 0 8 m 0 9 G P k d P W l 5 l Z 67 x N Z 6 D x Z H q 10 d J 6 M F h t e P A 9 l 5 P D 2 X h z P W Z 8 Z 68 f K p P d Y / N P c l 4 m 82 P H 6 e u 8 e J 7 T x R 7 L y t J t f P b D 0 5 e V A 9 h 5 E D 2 n i j 2 X k 7 z Q C I S Y V X Z W k q 7 P L X R o x a y u z P S a t H n b S m 3 P E 13 e d 6 J 0 A A A A A E E w A A A A B m 0 g q t A A A A A A A A A A C E x C Y A A A I T E J g A B E J M K r s r S X e F 650 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A i E m F V 2 V p L x v Z y r T 2 f S 3 z P R g Y r r h R s o m V J 9 I a c + 5 P O j o k u W d 955 k t k z N D b 0 w 829 M V W 7 p D H 6 d R i n r 6 Y O 7 p H n X X 9 K K 9 Q o 0 c u P P o 9 W J D F 6 l R n q 2 j F z f w 5 m 2 R M 3 N M i v P u r M M t 8 T F H 0 a j L q s t P M b
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-01-10T08:42:55.000Z" ,
"modified" : "2019-01-10T08:42:55.000Z" ,
"first_observed" : "2019-01-10T08:42:55Z" ,
"last_observed" : "2019-01-10T08:42:55Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"artifact--5c37058f-1bfc-44b4-a954-47f3950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"name" : "payment-message.jpg" ,
"content_ref" : "artifact--5c37058f-1bfc-44b4-a954-47f3950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5c37058f-1bfc-44b4-a954-47f3950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A B A L C w s M C x A M D B A X D w 0 P F x s U E B A U G x 8 X F x c X F x 8 e F x o a G h o X H h 4 j J S c l I x 4 v L z M z L y 9 A Q E B A Q E B A Q E B A Q E B A Q E D / 2 w B D A R E P D x E T E R U S E h U U E R Q R F B o U F h Y U G i Y a G h w a G i Y w I x 4 e H h 4 j M C s u J y c n L i s 1 N T A w N T V A Q D 9 A Q E B A Q E B A Q E B A Q E D / w g A R C A J x A t k D A S I A A h E B A x E B / 8 Q A G g A B A A M B A Q E A A A A A A A A A A A A A A A I D B A U B B v / E A B k B A Q E B A Q E B A A A A A A A A A A A A A A A B A w Q C B f / a A A w D A Q A C E A M Q A A A B 25 L c P L 9 H S z e + f e h m G n v f M f T 7 c o b c o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A H G w 7 s P J 9 P R v 5 n V 95 Z c G j P n s + n + Y + n 15 w 34 w A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A O N h 3 Y e T 6 e r T z L U 2 c 4 n t 9 P 8 x 9 P r z B v x g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A c n H 9 E y 6 P n X 0 S e v n X 0 Q + d + i P e Q e 8 g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D w e v P Q A A A A A A A e H o D w e g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A w 5 e x y i j p V 5 j T p x D b L D o P f c H h 1 a u X p N n v N 8 O i w w O t R z p n T 851 x r p 0 c k 6 N / I 65 x u j k H Q h h g d a F n H O p H m a T Z 5 z b j f P P o A A A A A A A A A A A A A A A A A A A A A A A A A A A A I 4 O i M t e 4 Y W 4 Z p 3 D C 3 D C 3 D F H e M l P R H G 96 t J R d p 9 K 8 P S G L Z 6 M P u 0 Z P N g h g 6 E S F G 4 Z K e i M m s A A A A A A A A A A A A A A A A A A A A A A A A A A A A D z w k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J I i S I k i J P P Q C E Z C L w e o i T y Z F M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B M Q T E E x B O J K U Z A E A Y c v Z H A u 7 I 43 Y 9 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C M o k p R k A Q B 6 x + m t j 8 N q v O b F E D U x + m t z d J p Q q N D K N T N E 1 s 0 y 5 m k X q 8 h v Z a z c 51 h t Y N R a 51 h t c 7 U X q M Z 0 2 Y a W W 0 t Z R q Z 7 i T L E 2 O d p N C g X s M z W x w N 7 N E 1 s 0 D Y r p N T N S b 2 K Z q Z Z G h V W a X O 2 l j L 6 a W a J r V R L 1 F p I A A C M o k p R k A Q B m 8 n S Q 8 u p N O e y R b z 7 r y r y y o U a 7 y m i N 5 k 0 + 3 H l M q y f t t Z m r 6 d B o h X E 9 o 0 R M 9 u i o h s o v K 6 t G c q t l 6 W 4 r 7 D L 5 Z M r 0 V x K t M f D J t q 0 G f R o J z 3 Q L z 7 N g y Z + m j m y 6 C z j 6 d 5 c 9 O 4 c 2 X Q H M j 1 R y p 9 I c z X o G G v p I 5e29 Z z f O m X l z 6 I 5 N 3 Q G C 7 S A A A E Z R J S j I A g C v P t H K l 0 x g b x y 91 w x U d Q c z d a M l P R G O 28 U Q 1 D n + 7 x V n 2 j l b r x z L d w p j o H M 0 6 h j 5 / c G T N 1 B z N e g Y 47 h z 9 N 45 d + 0 Y d N o A A A A A A A A A A A A A A A A A A A A R l E l K M g C A P W G g 6 r D e X u Z E 6 r n 3 m l x 7 j p M F R 1 G S o 6 D m z N 7 F m j r M 9 N b m G J 0 H O s N r m w O r 5 x / D t A A A A A A A A A A A A A A A A A A A A A A A A A A A A R l E l K M g C A I 1 a B k s v G S y 8 Y 5 a h l 81 j P D W K c v Q F N W s Y m 0 V 1 a R D L t G P z a M 8 N Y y W X g A A A A A A A A A A A A A A A A A A A A A A A A A A A B G U S U o y A I A i x 5 T s u J Y d e O b n H a r j h O s 48 z q s V Z 0 X C t O w 4 o 7 T k 1 H Y n h y H Z q 58 D r + 8 b 0 7 D i e H c c z p g A A A A A A A A A A A A A A A A A A A A A A A A A A A C M o k p R k A Q A e i q U x 5 X a H n o r 8 t H l G g Q 9 k K 1 g j C 0 R j Y K 5 + i u f o p s k K 7 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A R l E l K M g C A K I + 5 D V Z z p G 9 h 0 F s 8 V J 0 / e T M 6 X n P 9 N z m X m y r J A 6 U u T a d B y r z e w W G r 3 B 6 a + V p 5 Z h Z x o Z x o Z x o Z x o Z x 1 f q f k P r w A A A A A A A A A A A A A A A A A A A A A A B G U S U o y A I A 9 B G Q A A A G W o 3 s A 3 s A 2 y w D e w D e w b S Q H A 7 + Q + M f T j 5 h 9 O P m H 0 4 + Y f T j 5 h 9 O O P 8 A X 87 o g A A A A A A A A A A A A A A A A A A A A A A C M o k p R k A Q B i q 2 Q I K f D V G m Z J X a V 7 s e s + b 5 H X 5 A A A A A + 2 + J + 2 N A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E Z R J S j I A g D 156 A A A A f M c j 6 b A c h 1 x y H X H I d c c h 1 x y P t u B 9 E W g A P B 6 A A A A e H o A A A A A A A A A A A A A A A A A A A A A A E Z R J S j I A g D H n 2 x K Y 6 a y F H U o K 6 N I y 7 a 9 J n p 2 w K v Z W n P 831 k s f R p K J 31 H l V w z N Q q s 9 v j j 691 F T h 7 M y e X 2 G C + 6 B m 2 + z O f D b a U Z d 0 I 9 y 76 K p j u g k K u j l W i 62 k h O d Z V 5 r r K v a t x j j p t M m j 2 J b m 10 E c + z w p t q 1 x m 20 W V z m u J R d O 0 w 9 G r 0 u A A A A A A j K J K U Z A E A e k S R E k j I I e F h 4 e v P Q j I A I e F i m 0 9 A I E 0 Z A B V I m h M A A A A I + n o C E w A j I E S R W W K 4 l w A B E k A Q J g I T A B A m q 9 L E Z A B C J a h M R l E l K M g C A K c e 6 B z L O j I q w 9 W o r j d a c t 1 B z v e j W n L r 7 X i 8 n b p 9 O R v v m c 2 j s w O f d p s M O H t R O T 52 P C v m 9 q J z d e j 0 4 X v Y 9 K c P X g c u X S H L 86 / h y q u 3E5 O 6 + w 4 m j d a c b Z p 8 T m 2 d A v L q 7 X h z a + t 6 c a 7 p e E c H V H I n 0 f D P H c O J Z 1 P T j 2 d Q c q H Z F O H q x O Z L f M 41 v S m c a v s e n P j 1 f D j u u K e b 24 n M u 3 D m 5 + v I o 0 e + E p R k A Q B z 83 a H H z / Q D g + d 8 Z t I A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A I y i S l G Q B A H r P U b V E D U q i X q I m l m g b G S R p V 0 m p g 1 F q m J o Z B r Z v D U y x N j P M t c 6 w 2 q 6 j S y U H S Z r i a i o 2 M W k s c 281 q p E 2 K 4 v Y L j S z w N b N 4 a m K 4 v A A A A A A A A A A A A A A A A j K J K U Z A E A Y 6 O o M + L q j l 7 b x j r 6 A 57 o D B 7 u H N u 2 D n x 6 U T N R 0 h j p 6 Q 5 E u q O V f u H J 0 a 5 G f L 0 x z r t Y w e d A c j b q H M h 1 h h u 0 D N j 6 o 5 m r S O P 0 N A 58 t w 5 t 2 w c l 1 h z N l 4 A A A A A A A A A A A A A A A A R l E l K M g C A P W G s 6 S i J p c y Z 0 G D 0 3 M V J 0 2 D w 6 D n Q O o 5 f U A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E Z R J S j I A g C i v Y M W m w Y p 6 h j n p F F O 0 c e 7 p D J D c M G 8 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E Z R J S j I A g D 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C M o k p R k A Q B 6 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B G U S U o y A I A 9 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A j K J K U Z A E A e g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A R l E l K M g C A P Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A I y i S l G Q B A H o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A E Z R J S j I A g D 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A C M o k p R k A Q B 6 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B G P p O U Z A E P J + E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E U h F I R S E f J h L z 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A //8QALxAAAwABBAECBQMEAgMAAAAAAQIDAAQREhMUIGAQFSIwUCEjMwUkMTQyQEJwgP/aAAgBAQABBQLUVoj+TbPJtnk2zybZ5Ns8m3tbV/yfDY+2dX/JkED0e4m+q48
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
]
}
