2023-06-14 17:31:25 +00:00
{
"type" : "bundle" ,
"id" : "bundle--5d160718-2d14-417a-b73d-4790950d210f" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-18T07:48:14.000Z" ,
"modified" : "2019-07-18T07:48:14.000Z" ,
"name" : "CIRCL" ,
"identity_class" : "organization"
} ,
{
"type" : "grouping" ,
"spec_version" : "2.1" ,
"id" : "grouping--5d160718-2d14-417a-b73d-4790950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-18T07:48:14.000Z" ,
"modified" : "2019-07-18T07:48:14.000Z" ,
"name" : "OSINT - Very nasty Linux backdoor with multiple components" ,
"context" : "suspicious-activity" ,
"object_refs" : [
"observed-data--5d162440-dd38-482b-9b3f-4526950d210f" ,
"file--5d162440-dd38-482b-9b3f-4526950d210f" ,
"artifact--5d162440-dd38-482b-9b3f-4526950d210f" ,
"observed-data--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"file--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"artifact--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"observed-data--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"file--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"artifact--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"observed-data--5d162462-55a0-4486-9309-4dd1950d210f" ,
"file--5d162462-55a0-4486-9309-4dd1950d210f" ,
"artifact--5d162462-55a0-4486-9309-4dd1950d210f" ,
"indicator--5d2dbaf0-b47c-4ab9-b9bc-42a5950d210f" ,
"observed-data--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"file--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"artifact--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"observed-data--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"file--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"artifact--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"observed-data--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"file--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"artifact--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"observed-data--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"file--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"artifact--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"observed-data--5d2f2979-7440-468f-9433-4003950d210f" ,
"file--5d2f2979-7440-468f-9433-4003950d210f" ,
"artifact--5d2f2979-7440-468f-9433-4003950d210f" ,
"x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"indicator--5d162587-51e8-4414-8863-4192950d210f" ,
"x-misp-object--5d2dba27-3ecc-4f52-aff4-f71a950d210f" ,
"indicator--5d2dce6e-3030-447f-b917-4f82950d210f" ,
"indicator--5d2dceaa-69ac-4ae6-b87a-4f7e950d210f" ,
"indicator--5d2f24d8-bf18-4298-8ef2-49c8950d210f" ,
"x-misp-object--5d2f295b-c798-45fd-8434-4942950d210f" ,
"relationship--ae6d6c1a-397b-4f1a-bb05-5945268c7541" ,
"relationship--631b7191-337c-4348-bc29-fbe8373e336f" ,
"relationship--491e37d0-0186-48d8-b4bb-277cb9391551" ,
"relationship--414ec4c7-ce2d-4714-8abc-5bbdc3e5abaf" ,
"relationship--2f39d4b4-4645-4e2b-8d21-9999574970d4" ,
"relationship--abf436df-b3d9-4fb7-b9cc-3cb327707aa1" ,
"relationship--8bb3d046-adc6-4911-8885-9aa0ea6e5db3" ,
"relationship--39b20439-473e-4a1e-a431-a56ffd611ff2" ,
"relationship--d1b4ee88-2986-45f1-8c54-05d5a1752929"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"type:OSINT" ,
"osint:lifetime=\"perpetual\"" ,
"osint:certainty=\"50\"" ,
"ecsirt:intrusions=\"backdoor\"" ,
"veris:action:malware:variety=\"Backdoor\"" ,
"ms-caro-malware:malware-type=\"Backdoor\"" ,
"ms-caro-malware-full:malware-type=\"Backdoor\"" ,
"ms-caro-malware-full:malware-platform=\"Linux\"" ,
"ms-caro-malware:malware-platform=\"Linux\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d162440-dd38-482b-9b3f-4526950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-06-28T14:29:20.000Z" ,
"modified" : "2019-06-28T14:29:20.000Z" ,
"first_observed" : "2019-06-28T14:29:20Z" ,
"last_observed" : "2019-06-28T14:29:20Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d162440-dd38-482b-9b3f-4526950d210f" ,
"artifact--5d162440-dd38-482b-9b3f-4526950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d162440-dd38-482b-9b3f-4526950d210f" ,
"name" : "D9_fhl-XoAA2lqo.jpeg" ,
"content_ref" : "artifact--5d162440-dd38-482b-9b3f-4526950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d162440-dd38-482b-9b3f-4526950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A A g G B g c G B Q g H B w c J C Q g K D B Q N D A s L D B k S E w 8 U H R o f H h 0 a H B w g J C 4 n I C I s I x w c K D c p L D A x N D Q 0 H y c 5 P T g y P C 4 z N D L / 2 w B D A Q k J C Q w L D B g N D R g y I R w h M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j L / w g A R C A H G B R Q D A S I A A h E B A x E B / 8 Q A G g A B A A M B A Q E A A A A A A A A A A A A A A A I D B A E F B v / E A B g B A Q E B A Q E A A A A A A A A A A A A A A A A B A g M E / 9 o A D A M B A A I Q A x A A A A H 5 h f z r 5 a I a a S C y X T G N t 5 L j 7 q 6 Z o a e m V 6 G Y q X T M j d J M U P S r r N D R X L V z X a e f Z b w r W D O M 6 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 1 L + R R G y q o R l A n y I n d m 0 4 Z 5 a p 5 Y e 38 q u N 0 N z t W q z p n E 3 c s z U 6 e Z 1 R 3 X K z I 2 U 1 X H b l j O a s 6 o h s s 1 n B Z L s s K t G e U J Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A N S / k Z 46 a i i E 4 U A t q 9 D W c X N k 0 x N e e W N e 6 G p m n o s M P d U 7 M H L 82 N z m 0 3 O N p 6 U z i q F k q O e p 16 Z 3 O P l 2 h c H N u e I 8 u V H l d 3 P p X D b V O m d t L i 7 t g Z G z N r C G m z O s T X C y i 6 e d n s N F v T l m r 2 W p g n 2 a 1 y l R m x G q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B q X 8 i m u 7 h n h O F A L K / R w w y u l l k 56 G c q s o s 6 T n L t F z i j r x L b J O y q O i 6 P P s u 6 Z 4 X 0 t R b Y p T X s i k Y a O J m j r s l w v Q j Z 511 e m b z R 9 C K Z e X T X N L R Q Q 7 p 7 G T m u V Y + X 51 l C 3 Q m X t c q l y c k p n t k z 5 n N G d u x D Q m Z v i m T m i x c X d Q y S j b O j m i G d V c t p 3 x 5 x O a g 0 Z 7 J x v t T E 9 D q e d P T n V X q E K J R z o 15 B b O 63 C 3 b D x b N E D N Z H 1 T y L 9 V Z i b N B 570 q D A L A A A A A A A A A A A A A A A A A A A A A A A A A A A A N S + u I V 6 I G e E 4 U A s r 9 H m w y u l i 5 Y + h n q i d d n S c W 6 N Y x V 7 c S z 7 O Z m 7 p u T D K 7 p R C 6 l q T T F m n m m J X V s 4 Z O 6 r I w 89 G N m O V W m a z d 2 x s x z s m u f u i g l V q 6 m O 26 R i j p z N L I 2 F N m 2 L O a v 0 v N O 9 j q W i q f F j o z 9 N W a + T O X u 7 I v O b a U z d 1 Y 5 q 2 c L c e h T f V 0 81 c k J e J X 1 S v y k 742 M 5 o 7 + m C V 0 F o n z 0 T J n l H O p x v 7 l V Z C v a + q 69 c P f W h H n c t o r T n 1 X m C x e e f Z t u j z K / X 8 m u C w A A A A A A A A A A A A A A A A A A A A A A A A A D U v r i F W n M R h O F A L K / R 5 s M r p Y u W P o Z 6 o n X Z 0 n F u j W M V e 3 E s + z m Z u 6 b k w y u 6 U Q u p a k 0 x Z p 5 p i V 1 b O G T u q y M P P R j Z j l V p m s 3 d s b M c 7 J r n 7 o o J V a u p j t u k Y o 6 c z V n Y W E e b o s 5 a / T 81 Y z 5 q X O 5 w j Z X 1 b + S k x m j 6 G R V e + l K a 9 m N q d k b e f p j 2 V X T y 197 C V y V 9 Z + a s p Z 2 d i Z 5 a u s 4 u X w a q s r 9 E x 0 S j n X V / c s 0 5 V 7 T 7 Z e u K 30 Y S + d y 2 i y y G q 8 w W 8 v M k 9 N 0 u D P 6 / k 2 c F g A A A A A A A A A A A A A A A A A A A A A A A A A G p f X E I W 1 l U J w o B Z X 6 P N h l d L F y x 9 D P V E 67 O k 4 t 0 a x i r 24 l n 2 c z N 3 T c m G V 3 S i F 1 L V s N k W M V 1 / V w 2 W Q W E 74 S U N X K o 5 f c Y O 3 x W E b 7 E y x 1 W m a r Z j X l t d 5 n j p z L f 2 i 9 F W 7 G n U 5 m a N n M 9 U + T M 1 s N O u d V l X c 9 o Q s 4 n L a d m u V W f b n j s t O V Y y h K d O Q X 3 G e y G m 5 z d l L H e E Z w 1 i 2 c e 3 l G n T W r t 9 C V d l L H o 5 V o z 649 u p 0 G a 6 M p 2 j O F b N 8 Z d 1 y p l d A d l W c 7 G W P R 3 P p o 3 w l y V k u f v b J 0 h H l u u V L b Y z 53 d U l x J G o t X G c z u l c r V l F k 7 U x t m l P K n f F c 9 k f R M d P Y 50 X T j M u p q y N 99 v n v Y r P L s 0 Z j t e y 88227 h k s 9 L s e V 3 d l q g W A A A a l 9 c Q h Z w o h O F A L K / R 5 s M r p Y u W P o Z 6 o n X Z 0 n F u j W M V e 3 E s 7 F q Z O 7 u m F v r M 3 L C w 5 Z S X U 6 b E y W X 8 T J H Z i m 747 s 1 x T y + a 5 o 6 Z m S 7 s o z p b K y U a 5 m H u 6 l a I 9 v X P b p w y X c r v r k b J J R K U 5 Y R 7 G d J d 5 I z 30 z s i u p m p d 7 G a h O u / X H k d m O 55 Z 2 a 1 V y 5 n p Z z k 0 o u p 0 2 Z r O d z 25 H v N c + W V b L z p j o z x 2 W n K v E Z T r 2 E b 7 z o u p 0 l H U s 9 l c o a 5 y l L t 518 u r E r q J S M s 9 u 59 O f f G y V W i a y 3 c l O i N d u u F X d c D P z 0 K E z 9 n V N c 7 P Z Z g 41 L R H R Q S t p s S N f o x T D P b l M 9 k d S 5 + z o x r k u 3 F E r c 1 X W c u t x 89 H p 5 s 9 F B 2 u 68 z z 0 5 o o h 6 M a x v S z G I W A A a l 9 c V w 15 i q E 4 U A s r 9 H m w y u l i 5 Y + h n q i d d n S c W 6 N Y x V 7 c S z s W p l 7 t 6 Y J b q z N C 4 t a y l b I a L G c n d X E y y v x T V 0 d + a y m O i Z m 5 o m Y 52 y l y 6 c l 1 V S 1 d S i n Z I w N N L S G u S Z p 7 M S Q h r u M c f R w k Z U 9 m 74 W a W c M r V m W d 1 r W N O m a l o q v x 2 q h d z p 5 Y 8 q t W t d f G T t t i 5 W 7 z U 7 Z y 5 r L P t Z Z 2 E k l X y 2 o S 20 M 5 J 6 + y 5 O X Z 1 n y d t m a y n R N 0 W V X J H l t t z k j u p K + 34 y X Z a Z r K 5 Y l f L 4 W V 2 U 6 J u j u u + 8 / P 5 u o K X L 1 q W U Z s b K 9 a 5 O 6 s h 2 y d 1 u S G 7 Y e T K 6 C R V e q e V d p r M f N m h c D 0 a I w D U m g i y z O L a g n y I t h E a K o C y M Q F A A a l 9 c V R v q K o T h Q C y v 0 e b D K 6 W L l j 6 G e q J 12 d J x b o 1 j F X t x L O x a m X u 3 p g l u r M 0 L i 1 r K V s h o s Z y d 1 c T L K / F N X R 35 r K Y 6 J m b m i Z j n b K X H b V d b K r V 1 n H b d I x c 0 U t O 3 y Z o 5 u x E G i 4 y V + l h K b K + t 6 I y 0 u f n T v N Z e 6 L U y Q t p m 52 R v x 6 Y J R 6 e O p C 1 Y W d v T D O 6 x a K P S 82 E p X W 5 e z r W c J S k d r t q e f 0 a G c 9 l / T D z T n a 5 K y 1 M l t W h c 9 t V x D l 1 q Z Y 7 a S u v Z j V O W l M S V k t P N M K r l X o K + a r 2 M V e 6 h a e x v W i V l G b H v N c u X m v I T n K 7 V y 2 X b D y l 8 C i 2 r 1 T z L d F Z T X p 0 G L u 6 i M A 1 A A A A A A A A A A N S + u K 4 a q C m E 4 U A s r 9 H m w y u l i 5 Y + h n q i d d n S c W 6 N Y x V 7 c S z 7 O Z n 7 o u T B O 7 p R V o p a s r 3 R Z y T 0 d M n b I L G 2 y E m d r 5 W e G q 4 x c v i t N t F y 0 y 9 C l m u r Z E y W i 1 d 0 T T L K + i W t v j Z m h 6 P m n Z V S a l X t M 5 r p R M 3 d 0 T F L n J 0 n 1 d n r V 2 T X C K m 2 y m W i 9 M N l t h g n d l a v o t 0 J i t r L z s u H e c 0 m W W y M k M / o R u c d l a b j z T C q b K 9 B T 2 d 6 Y p a + p l j r y L 2 K 9 a o b M c J 3 r M x Y v I a Z p k 56 d C U Q t p X R D V h k 7 B Z N 1808 y z 2 V 6 d q I + h N f P j 6 d J T Z R e U Q 2 y M 9 O j W e c 2 S M + f T j J 9 r I F A A A A A A A A A A a l 9 c V x t p I Q n C g F l f o 82 G V 0 s X L H 0 M 9 U T r s 6 T i 3 R r G K v b i W f Z z M 3 d N y Y Z X d K I X U t W 17 Y s Z m n q 5 L O w W H d M I p a e W Z 46 b j F H R F c 9 t V y z z + j S z m s 0 R M f b T V c r p s 5 J a K J Y 83 R s y 1 + n 5 q 8 l C S 6 s + k x j n o i 1 n 7 t i m M 5 O k r I 2478 S j 0 8 l X a 7 W n L b 2 f P u t s M U N W V p K e h M V k D X O y 4 n Z V 6 U 5 n 2 x k z z 1 R s w J p 0 i 0 Q s r l X o I c l e m W O z q Y + 6 s i x d v W q G z H H W l Z l n G x e d t m z n 56 F C Z 4 X U t z b M M i K y a r 5 p 5 l n v o 0 7 V x 2 z X L V 6 F J l n G 8 y z 1 S M y e s 87 u u R i p 2 Y 0 C g A A A A A A A A A A N S + u K o 6 q S i E 4 U A s r 9 H m w y u l i 5 Y + h n q i d d n S c W 6 N Y x V 7 c S z l K 0 y d 1 a U 82 d k V q l D 0 T F C d h V D f U m f u u k z 85 a 1 y O v G l 9 d t Z O E 6 i F 64 r h X v T D o z X r S n I q b K k z t l h h 5 C x q P N N J G V f o J m h q q T P d q z l c N 9 R l 5 v r M 0 u y m 6 p X X X H n W a C 0 8 r k s b p 8 S m E r 1 z W V 6 C j m y x n z 3 o 0 r n k m S q 0 X T O e u q M 2 a O 5 u d Z X t Z G 68 w y 9 W E v m r a L J x 1 X r 5 t k 7 z F 3 b d H m 1 + t 5 N n J w U s r F v K y T 5 E s u c D v E d 4 C c B Z y A 0 1 V j s o C U 6 h K 7 O L F Y l E o A A A A A A A A A A A
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-06-28T14:29:30.000Z" ,
"modified" : "2019-06-28T14:29:30.000Z" ,
"first_observed" : "2019-06-28T14:29:30Z" ,
"last_observed" : "2019-06-28T14:29:30Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"artifact--5d16244a-c204-489c-af1b-9e7b950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"name" : "D9_f5EBXUAA3WPB.jpeg" ,
"content_ref" : "artifact--5d16244a-c204-489c-af1b-9e7b950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d16244a-c204-489c-af1b-9e7b950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A A g G B g c G B Q g H B w c J C Q g K D B Q N D A s L D B k S E w 8 U H R o f H h 0 a H B w g J C 4 n I C I s I x w c K D c p L D A x N D Q 0 H y c 5 P T g y P C 4 z N D L / 2 w B D A Q k J C Q w L D B g N D R g y I R w h M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j I y M j L / w g A R C A B p B Z A D A S I A A h E B A x E B / 8 Q A G g A B A A M B A Q E A A A A A A A A A A A A A A A I D B A U B B v / E A B g B A Q E B A Q E A A A A A A A A A A A A A A A A B A g M E / 9 o A D A M B A A I Q A x A A A A H 5 d a 7 e X O n O 5 z Q 136 n N b Y y 5 v d d a Z W 9 W C V v m d Q h u r s y u j W m J 0 4 V z 2605 j o Z J X k / S F W j P K E o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G l b 5 G e F l d k Q o E 52 z 4 X F Z V o 6 S m K W k b b b e V w a c z p L K 9 G r W M d e 3 w w 2 W Q X 2 v d F M 9 e m w w L N L V d d u X K U 6 r 5 a J 2 a c 3 J V 1 Y Y c 1 v p 2 z D r A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A N K 3 y K K 7 K 6 i A A B O C L P L N G 84 G + k z T 0 e G e O 6 V m L z Z I w x 6 f t n L n s 8 l w t i X G 6 N V m N s j z 6 R 9 p Y v k d 1 + + W C r Z b X N t 1 W n L n 0 K I p p J v T m d R n l u l D U x e b 4 G W c s + d t O Y G + e s c 1 v s O Y 3 z O b p s x Z 0 0 5 i r 769 Y y t e o 5 V v R z y V Z i d N O Z 0 m e a 2 + 6 Y X T z J n v s x Z 0 0 5 i n S q 1 j E 32 m L y 7 H n T T m K b 56 x z b d 3 q c t 0 o L l s t w 5005 i m 63 W O Z b u k n K d a p c d m n m 5 r R n N e 2 a L 9 Y 5 b d c c 7 z o w O e t 1 L g d D 1 M X n Q w k Y d D 0 x 2 a e b m t G c 17 Z o v 1 j l t 1 x z v O j A 563 Y v O n 0 K k w 23 a j l O h n X P Y 3 H N d e p n m 6 d F E 1 V G C a u p n v u e a 6 F l n N j t k Z U Y Z 3 O d M i L p 2 a 58 u G v 1 r G 2 e m J 0 86 U 2 W 4 c 6 s r v o d A 1 g A D S t 8 K K 7 K y I A A A L I 6 v N Y y T 0 e r j l q k Z q t s 7 O e 2 w l y z t v M D V c Z I a / b M N l 7 O q b K q + d v o L Q 1 A A J S r I C g L K x K J A U B b U A A A A A A A A A A A A A A E 0 C A o A A A A A A A H t l R A U A A A A A A D 2 y o g K A A A A B Z W A A A A A A A A A A A A A A A A E 4 E o W A A a f L v Y y w s r s i F A A A s 80e8 b j d H N W d 70 u k 5 j s Z V w y 2 e J k j 0 C 8916 T n O z I 4 j s c s i t 0 c 2 B q y 7 l 0 d V H P 0 R q 1 z M L Z D W M 0 r b l x N N 0 Z K + h 7 n f O b 5 W Y P N d h z 1 / u + e d 0 I Y 6 Z 7 I 7 t 8 s E L 6 Z q H l l e + Y W A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A a V v k Z 4 W V 2 R C g A A L b t X C 8 p s x 9 I G w A A A A A A A H s o J Q s A A A A A A A W V p b K w s 8 g j 3 w s C g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A N K c S q E 4 J E K A A A A A l 59 J 0 5 / N O p Z X H d v k Y s J Q Y 3 d T q 6 P C 8 Q e i W 1 X 0 Z 6 J w 0 m a X S n y 9 f I n 0 c O u V c e m n T n O j B O e 34 d + e T o Y s 9 V O v X l y X R r u c T p e S 4 I 6 t l c l 0 p y 8 p 1 o R z P e l h 3 i v w 6 c A o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D / x A A t E A A C A Q M C B A U E A w E B A A A A A A A B A h I A A x E Q E w Q g I T M i M D E y N B Q j Q H B C Q 2 A k U P / a A A g B A Q A B B Q I L m g u d A s 3 O O T B A w I 6 h S x K l f K K h a Z Y 1 H w f p c K V X E l c 5 e y S L l s s 9 K I n M k u 7 l M b j W g S b C y g z R S 93 k l k K o u H c J f O 23 o O i q x F D M P 7 A T v z J N 3 u n s t 2 v 0 u F z Q U k U e X A i E E K R Z U c Z 0 j 9 u t r o i y a k o m R o r h S e h J Y 5 + 3 g x 0 N r D O s G G M u o X S J A d Y / o 4 K V W 2 p x R 5 S x b h p u O G q 1 o M Z t w N 55 / T 6e21 b 6 W r b N J J V F 2 u M 5 L n r f Y l r Z Y t w 6 t c N g K S E l s 3 + 9 p c 9 H n g t c a y C d y 30 t F i t m / w B / 9 F B c 0 F z o f I V i p w X J B X k w I k k 6 R M S M E E j U q Q O Y L i 5 c B w S T o E E N H W D 0 o k z J F a 2 u m o 9 T 6 q J M y R W t r p z v a i K F r I q 2 g d t Y / b e 1 E U L W R y k F S 9 q I o W s j k F u m S K 1 t d N X W D 6 R + 29 q I o W s j V l j q F y m 10 p L c x T r B 9 F E n I w e R F m x j T A B q C 5 T a 6 U l u Y p 1 g + i i T k Y O q g E 0 y x 5 H W D 6 m 1 h n W D K J M y R X X B x S r K n W D K J M y R X Q A R 5 Y / b e 1 E F e n O F K q i n F H y U l h V V b u S b h u N N 8 I C S e H M 4 p 0 t y 8 O D u N 0 P T c a T U x W 4 l x 2 F F 2 W 3 Z 6 A L O p K z Z U X W 6 O v v u y K k G E 3 + n Q 4 t C U G z P + d 2 W 3 q g 8 K e G 2 J Q J I 4 p c i 9 d B D a j B C g v R Y r a 6 i 6 A Z g Y L y 2 d R L Z s / I s g 0 3 Q + t x 57 G t n o A s g v i Y 5 F 65 J H 4 i Z f W z 0 A W Q U y r r O 7 L a 1 M 45 I t N K i D v N 3 l 6 X H n s a i W y h M O p B J A 9 b n i g 0 4 a p L Z J x e t k 3 K E Z Z a T y 2 / B g z i s o M 0 b Y J X i 9 x 8 n H 1 n i g 0 4 a p L Z J x e t k 3 K E Z Z a T y 2 / B j x G 2 s 4 W m / 6 L W Y f 2 Z J u u 7 E m F X v W R y J Y / j f 72 i 4 n d z G 5 I o D h b b P t W 54 b o 2 g z l / Q k y V i b A Y r w 6 M d p C z K O 9 b Y v d e e x Q 7 X O F z S r L Q + S q F g R g 0 Q B p g g b b H l b A O m 21 Y M a D Y V V l W 19 x 8 x 5 w c F m l z K 2 K Y l j y l 8 r + a D i m a R / C H q z 5 H 4 A 9 W f I 8 w t l f 8 A w S x P k B S q 2 w c n 1 P k 2 h m 0 g K 3 b v Q v n c u 5 i x u N a C l q T p b B I R S b l M x D H H 1 Z n K 6 T E q W A N w 2 A x W w p U h 8 S / S Y X N K p b Q + S i z c x 8 g e p 9 e c e p 9 d G t x E f A E Y 8 p w D o U Y H U D J I w e Q K I J Z Z 6 V Q W U A k j B / 24 U q t s r o f J 4 c k X b T F m 65 u O x a r s m t q c I G K c K m b y r c P 1 C f J S W 9 l p M x a 2 V M J H K + F H 99 p i L i n F 24 c 26 c Z t H s q C 1 J 0 t g 4 C s X L G J O P q W n m 5 n B M j b H Q Z F u v 5 D r e D F n d i X b M K / p X x K M f U p 73 x P / b h c 0 F 6 U f K Z Y / j S O P w W b N B i B S s V o M V P + 4 C l V t 5 O h 8 m 1 m P W V 3 O 3 + o w u a C 9 K P n Y I H L 0 k 6 R 5 F U N q R j Q j B p R m u m K G M g Z O k f A B k b e E 5 T g H m H r / u L X v P b o + d c 7 V r 4 l v t 2 v e / v 0 u 1 x n Z 0 t + 7 R u + / w A r i e 0 3 x V 7 Z + H Z 9 v C + n C + v F e + u I 9 n 9 N z t p 8 T h a s 1 e q x 7 r / f 4 n s 3 f i 3 O y n x E 7 V v 5 V z u f 7 j //xAAsEQACAgEDAgQEBwAAAAAAAAAAARESAgMQIRMxBBRBYCAwMmEjUFFigaHw/9oACAEDAQE/ATLgtBYksTxJYsXLE7L2q8iSRMkbF29oPIkksWLliSxipMuGy5ZluRZbZZQWLCe1yxcTnZvhjy5gttk4RYWUmLlbWLGL42sXLGL2sXLmLna3JYsSWE2yxi52tyWLDZYeXImTyXFlL2eXJctvckksYsyXb5ViSxYkksWFzs3PsVufnwQQRvngk/4OkmdNcKTp+h0u50E3CZ0PuLRT9SqiR6EepklwQuDJQ/Zsv5Mkss/YuWdWh6gspfwZJUTMcZQ/BRhm5+kz0Onkk+eJPKTljjPdSafhVl0+fqk1tPp6jwNXRWnnX7C0FnlVfoLQlYue8/0eX/EpP+mDoTf9o/Dd+fSTy3bnupM9KmNvv+e//8QAJxEAAgIBAgUFAAMAAAAAAAAAAAECERITIQMQIDAxMkFRYGEiUKH/2gAIAQIBAT8BI7mNjiUYFbmI4mAoFHyP6g5S/wBJ7LlKe6Q0/brp2P1Ic3sarSIzt19LasUSkUYbmJgYlGBJ0KO6fQxfok/fnTsaft0NOxpvx0RTXkSfNpjTfjnTsaft0NOxpvx0NN+CSb8dhpvwSTfjtMp0JfPOndlO+lp2R7WJRiYGJRiYj2KfyJV9PlJqTIzyfYlNpkXaIybRqUZmRmau25qmoZOxcSxFvcX0KXFqVEZZK+1XZoopfRYwyTZpko1y1acYv35LyNmrul8inaNTax8Sr/CMrVkZWrNRpWx8Wr/DV/jkanp/Rcbxsa34Rnk6/vf/xAA5EAABAwICBwYDBwQ
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-06-28T14:29:42.000Z" ,
"modified" : "2019-06-28T14:29:42.000Z" ,
"first_observed" : "2019-06-28T14:29:42Z" ,
"last_observed" : "2019-06-28T14:29:42Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"artifact--5d162456-1928-4d99-bdbd-4d1f950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"name" : "D9_gbcAXsAArCk_.png" ,
"content_ref" : "artifact--5d162456-1928-4d99-bdbd-4d1f950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d162456-1928-4d99-bdbd-4d1f950d210f" ,
"payload_bin" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A s U A A A G H C A Y A A A B Y s y / i A A A g A E l E Q V R 4 X u y 9 f W w U Z 5 b / + y U E t 3 m x 0 6 Y x i V + y t H F s S J g R Z k I Q g e x d B 6 L V M o S X R P e 3 M 38 h R G Z G y U o z V 1 F 0 R 7 O r m / y R S L 8 Z j T S K b q L 7 S 2 Y z E y H + m t 17 l f C y T E a r I f F q Q k A J G Y x m S I w J 0 G z 8 E j A N H T u A 27 z d 5 z x V 1 V 1 d X d 1 d V V 222 / b 3 I z W m q 0 49 d e r F 7 m + f O s 85 s + 4 o Q A g h h B B C y A z m L u c C Q g g h h B B C Z h q z v v + T / 9 M R K Y 7 j B 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d162462-55a0-4486-9309-4dd1950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-06-28T14:29:54.000Z" ,
"modified" : "2019-06-28T14:29:54.000Z" ,
"first_observed" : "2019-06-28T14:29:54Z" ,
"last_observed" : "2019-06-28T14:29:54Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d162462-55a0-4486-9309-4dd1950d210f" ,
"artifact--5d162462-55a0-4486-9309-4dd1950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d162462-55a0-4486-9309-4dd1950d210f" ,
"name" : "D9_gkKyX4AAyIGB.jpeg" ,
"content_ref" : "artifact--5d162462-55a0-4486-9309-4dd1950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d162462-55a0-4486-9309-4dd1950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A A U D B A Q E A w U E B A Q F B Q U G B w w I B w c H B w 8 L C w k M E Q 8 S E h E P E R E T F h w X E x Q a F R E R G C E Y G h 0 d H x 8 f E x c i J C I e J B w e H x 7 / 2 w B D A Q U F B Q c G B w 4 I C A 4 e F B E U H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 7 / w g A R C A E G C E M D A S I A A h E B A x E B / 8 Q A G w A B A A M B A Q E B A A A A A A A A A A A A A A I D B A E F B g f / x A A Z A Q E B A Q E B A Q A A A A A A A A A A A A A A A Q I D B A X / 2 g A M A w E A A h A D E A A A A f z m U Z e v 5 l + X T m X R X L P L z f j l K t z 2 i u V a e h k l N q q 2 u t l R Z X Q W A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A a J R n Z o x 30 S + l m z a O 3 A z s 701 d q 5 d t + e W L y e / Y r p 3 z 34 r K 7 h p q d / N o z W 9 K r M 0 o 2 x y 6 l q 53 t S p 7 O L 68 W 2 u 8 h T l s w 6 s t N N S z R m t 6 V W Z p R t j l 1 L V z v a l T 2 c e h 5 s J F t m P Q Z b K 7E7 p z z W u r V l r V X T e m / J L J m 6 s l 1 d U e h n 5 Z d n v i s + U y j 0 s k s h b G F t Y v V y U x t 7 y B O e P Q Z S x P Q w x i u 7 J b n T M N Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D R 3 k r N O P R n l o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B o n C S a c e j O v p V c p + d u O j P D t O a q L i q z N 3 S i 2 p 6 G v J t x 8 / R t j V P 1 e G / t G v W M W b X X y 6 X X Y 7 N 5 s Q n Z Z n 7 y V H k 5 Z 9 p u S E 4 V 1 y c H H 0 W c p n z m q i 1188 t G G a Y d + W b p P R n s Y W Y 5 L 3 L r p z u / v O 6 x d V L L m 9 h W n X X Z h 2 X E n O a 54 v R y d b 9 H F 2 D F G 7 J o a t u x T Y w + l i t d L q o 1 Z X x p n y 9 V I 78 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A N E 4 d s 0 Z d G e X 0 q u U / O 3 H R n h 2 n N V F x V Z m 7 p R b U 9 D X k 24 + f o 0 8730 + G d 9 L e J e d s q 57 v l m u 1 L q K p l c b + 51 K m 7 J Z q q 53 N s l V m 8 v q 9 P z 7 J e j y 6 c 9 W p m O n P 1 N O K / M W U 3 W r y j k i U q p n d 2 K t m f c t 7 U e y s O w z 6 U 5 K u J Z s x S S q y s 1 q t 8 y S b Y U 0 n o 5 q t C X Y 5 Q X n q + X Y T u w 2 p X Z G T S y r i X c p q N j L c S y W c a u n U Z t V Q L 8 l 5 Z T y d l l l M 9 d 8 / N v m J X U y 6 Z 5 b C a a K 4 R Z j K j W 1 d m n J n H 2 V T p t q 7 n Y 0 I i V m G 5 b 6 O V m 7 m a 1 m V c q 10 W 4 r k u r x z W 7 N Z 1e7 M 5 m m y M m t N d U W d V O e N u 9 j s k o 0 V z a r 1 Z Z F 1 m b j O n L Z F c 2 r L r a 72 j q a K 65 J O C m 2 + F U O H e 7 N d T r Q d O Y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G i + i a X 5 N G d f S q 5 T 87 c d G e H a c 1 U X F V m b u l F t T 0 N e T b j 5 + j b C v n p 8 O 3 H Z W a a y y c J 54 o 3 U S z r t + W z e d G a F u W P d T p W r l Y T r 7 z 72 R q r 5 z 0 K 4 w 68 d U a 6021 K U l Z X Y v K r c y 37 P O 1 M w 5 T c v b q e J d j t q W + W a w y b c + l r T 59 v G Y 3 U 9 X R y m b O j L O B o l m k l m f p q v Z j g u 67 D x n d T y u S O r K t 10 B 2 e K 4 j u w 3 l 1 e O Z p 0 e Z N O 7 f J 1 r 2 e a S 6 O 5 p J q y O l 1 X c 5 t Z R a j n X V g O f b R f g n c 23 R y a z u V 13 O 2 E a p J 952 u 5 d N L V 1 n n a z q E 8 y y F d u 5 Z m U T V s e 8 m t J U 51 a q N V s b 89 b N / c n W t G r z S a 6 o 2 k O c o X T P J 0 9 K e C T F e r N J r T m n U k 7 K K V v u y T P R 86 y C a u 5 u G m v H N d N E u n b M w 0 w o 6 a M N 0 G r 6 + 1 W b a 4 R k s q y 959 t W T R n n Y O v E A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D R K M 7 L s s o x 6 V X K f n d I 6 M 8 O 0 5 q o u K r M 3 d K L a n o a 8 m 3 H z 9 G q f Y e v w S h O n K j Z S m t N 2 a n W L s u m O d Q v j P U q U 8 x q y 2 q X H 0 X T 829 w 5 p p u 6 Y 4 d R C E W v R o 7 n Y t w 66 n S U J x I + j i k z o r h R H r R z R u I e n 502 n a e k t P l W t b G c z q j j F 7 l a z t w a F 0 24 r m L 8 V 9 B o v 8 A M 6 u 27 F 1 O 6 c Y 146 r V l L J c t 1 M o n a b e S 36 / O X G i 7 H 1 K 64 Q 5 + m + W Y e h X G H T l q h p z z E s 8 l 1 Z q 8 + a X 5 p Q l z b K L 7 q j X n u Z 1 z 82 y Z 0 q F V T r p b 36 P P t Y 7 G u u 6308 r k t 5 X Y a q a Y p 6 O W j h b Z j u a u u y 9 Z 0 0 0 D Z V j s X d n g S V m W h r 0 + U c Z t u x 2 k c u i p u e j F Y n d G f M v o 10 Z + e m / A b 9 L H 2 X T l d z v G X V K z 2 e d r T k a p F X e 1 t 7 r P L u Y s l C a w B r h k k m y u n q W 5 p R a 0 d z k 9 C O a L M d e a t q W v P m P Q r o 4 W w o v a t j X X Z 6 H M 1 M m q u B b b K Y p t x y g X 5 L C 0 a s u h r R y q L G y q u K M f H P 0 X 2 Z B v 7 C P T h K R L b k s r q f o e d N n t X a 2 + a a b C W 3 D B i + u v r U + w 6 a O V R Z 2 c y S h X f R b p z 11 r s n X 1 m f K C 2 b f I u L K + 1 W 6 a r M 8 a + V S T X l j a l u f P F r f V X N L a o i W a 6 D V + n K Y 0 10 d J c o Y 6 S l m t 5 + q g d + G i 2 q x N O H R n W 67 H Z 15 W I T s s z 95 K j y c s + 0 3 J C c K 6 T j T w 7 a J 5 N L n N F r O L 3 P I u X R j t q L E J G 3 O p Z z e n h u b 0 U x y Y d 4 X o G o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B o v o 6 m z D f Q v o Z z v w h Z y q a s V S y T 7 z S 63 J Q z f 3 t D W r P C z F V R 7 w 66 q Y a O n G P e U k t e S J P X 52 g h O W R Y L T d W 3 P V z v e G q G o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B r 2 Y 9 B z J f Q a 7 c c u 3 C c 89 c 1 P V 518 t 9 N H S / n e J o 5 Q 3 J z r s i P O V Z 0 v z 0 e f r 7 G a e T p 57 r q S y j I W Z 7 q S z v N a U 5 + 0 t W a 8 l e a o H U N Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D X f R a d y 6 c x Z Z C f X i 7 B W / L X R Z Z 2 m 7 G 4 a s s k 15 u 93 n k u R l R h z h 22 Z 6 b p i y F 1 O s T n L K Z d M L m 51 y i z b y u s 9 D F D Y l N F L n 2 D o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 130 a B j v o L N m T v b j O e e u W c K 7 c a 5 O / P u T l Q y s n X C t N M O l / O X a x X T z v H t d g 3 Y W Q b A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 13 U 2 k 60 l + 1 + F + / + A W d M N X X h w 5 Y p d 49 b s G 3 E y D Y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G v R n u J Y 9 G c s 0 Z u 9 e S z N 3 N 0 c o n q Q 5 b 3 O p 2 Z 2 s W X Z O 6 J w n i 255 U 8 + m n m e 3 O d l X K N c 5 U 3 R a 0 1 W Y 8 l A 7 B q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5d2dbaf0-b47c-4ab9-b9bc-42a5950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T11:54:24.000Z" ,
"modified" : "2019-07-16T11:54:24.000Z" ,
"description" : "remote host" ,
"pattern" : "[domain-name:value = 'auth.to0ls.com']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-07-16T11:54:24Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"hostname\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T11:57:05.000Z" ,
"modified" : "2019-07-16T11:57:05.000Z" ,
"first_observed" : "2019-07-16T11:57:05Z" ,
"last_observed" : "2019-07-16T11:57:05Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"artifact--5d2dbb91-1700-4767-9fbc-6552950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"name" : "D9_jn9BXkAATcRM.png" ,
"content_ref" : "artifact--5d2dbb91-1700-4767-9fbc-6552950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d2dbb91-1700-4767-9fbc-6552950d210f" ,
"payload_bin" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A b w A A A D F C A Y A A A A v 6 k d i A A A g A E l E Q V R 4 X u 2 d f 2 w U 17 n 3 v 5 R i Y 7 C d t R c 79 d q U x Q 4E4 l R s E m P R 0 L 7 X Q J R e m h a c 6 N V N / q p Q m 0 R w p V 6 p q t 6 q v X r h D 5 D u v a p 0 d a V G 74 U 2 e S v U v 5 L q V W L o T W 5 v F I K r N G k E z s 2 i 4 A A m h q W x v Q m w e G N j w C Y J 73 n O z O 7 O z s 7 M n p m d X Y / t 5 y M t Z u e c P e f M m Z n z n e f 8 e h b d E Y B h G I Z h 5 j m L n v q H / 2 U j e F E 8 / Y 89 e P B q H A d + E 0 f S H B w g H n x i F 55 e Z z h g U W a V O P 6 g 1 V v k r T 7 s f y t t D l T m l X f f M x 9 i G I Z h S u A r 5 g N z k f 9 + + T D + / p + 0 z w t n z a E a K n E Y h m G Y + Y u D 4 C X w A g l E W a w g I 2 Q R 7 c K + b 4 f M A Q z D M A z j G w 6 C x z A M w z D z h 4 I x v I K x r r P 9 + P u X E 4 Y D u T G q 5 x H D M 9 + O 4 m v i 6 C c i 3 n 5 j v C Y R 7 / E e P L g i c y A t 4 s Q N c f Q x w k x w H m R d 9 u O / 6 b 9 N M Z F O V K S T s w A / c R g f k + V f 4 T w + p x L H F s X z K l o / R e A x P I Z h G H 8 p E L w c I T z 2 b C 8 e u 2 o t e A 9 S Q / 9 W H M + / l U B y f Q / 2 C V E a e + U w X j i T / 9 s D 4 r e a q I T Q 0 g Q k r 5 i F q s g k D y E w j 61 I 49 U z W l i L y G v v 4 y G 8 + n w f X r 1 i i g s 1 M V O J Y 43 K e a n U T 3 F Y 8 B i G Y f z F e 5 c m W T X U m N P / z y Q w J v 5 E s l a Y E A F h A X 2 S i w 2 y h A r F T o E r i a z Y E c m r Q k j 0 9 C u P i / N y r B + G Y R i m 0 n g W v E + s G v k s Q q R E Y 491 w h r 7 x 148 v V 4 I h T m K M i E 8 + G 1 h I T 27 C //+j+LzTEx2Ec4O6uflXD8MwzBMpfEseMVIvtWP/f/UhwOvJIBv6wLhYSbmg09ov3vvrT5tWcHzcZOFVVn8Oi+GYRimspRN8DTSSJ6J44XfCLF6JS0ttceazHGciOLBdTRJpT+vW3P2KfW8GIZhmEpTHsGjiSbfjhq6+0J4cH0U2nhX9qCOOHYV+FqTMb4pbH0mjLo3tVmP5UNbF/jvwnIrEDFX58UwDMMEifIIHrE+hmekcGji8b0VCbzwvL7UII80Xn0ljv9eEcNeQ3xNbPQw6GHP9qDlTD9eeEtYVY/P0mJ15fNiGIZhgoTDsgRmNuFlCQzDMP5SPguPYRiGYQIECx7DMAyzIFh07ZNB7tIMIP/n//3JfIhhGIYpgUXV3VtnRfD+9w/+p/lQAXsPHjYf8s7yVdi+qRkfv3sSp0H/j+KzD/6Edy6bI1ogfxvFXZc/xIsf+DQds5TylIJ+LhXJi2EYJkCU0KW5FHWNLeje0IltbUvNgSWQxpsv9uHNa+K/9/8PPLXtb9BrjiKoX71RhN2HleYAS5rwsGzkhbhMid82N+MuXMHHig2+Fh/466c+iV2J5SmFSubFMAwTJDwI3lK0rnkIj2/qRPfKRtTV+Cl2wOWT/TjeGMPWRqD37kXAl5fRZ46EZfj63ctEZNFwm4MsWPkNYZ1dOKlbNO5+S0xcPIkXj/lnEZVaHu9UMi+GYZhg4UHwbmH0/Hty2vyxU2OYNAeXwrU4XhwI4clHo8Bwv5DWO7h03MK9wPImrFyuZnGRJXg/EvjPize0Ay5+Ww5mtTyVzIthGCZglDiG14DuTe2oGxnEsZFb5kBH8sbwhLjtfT2R+65D3ZnEl5/+Cb8/nTtOovHd9im8fexDZ0ul+T5sp3jvXsKEfij723evSEvr68uFxYMbOE1jaVN6pMyYnf61IByK6ZjxWh5hma1cHcX9dzfhruX6oakrOP3Bh4Vx2pty5Z4S6ejdpoRaXgzDMPMTDxZeGejowQGy6hpi+PGeXfhxV0geo25E+hjFjrirdhk+u5BwFjsSrXaIxjwnLtkuvanlWCnDqKvyQ/xVHCehyDJ1Cf+p5/02dTtOXcZf8wQhl8797cvw8Qe5dFY2k4hYUEp5IFRuKiGESisTTZz5TFhr9RnxA3WTbsTmu6dEGnoc8Xntg0FDuT2UmWEYZh4RDMGjiSonE+jcGEMzEnhzANjSFTVH0mkSDfQNfHxZ7xK0hCaFNItG3WQBZrr0LgziHSEamvBMYcLWuqG8gM8+zcTV0dP5TIjQf35wCR/T74W1RJbVZ1NW5Sq1PDTJ5EZeGe4Sllk2nhDT+/VyyrLoTEwZfuO6zAzDMPOLYAjecBzHEcPWDpq0EsdghzZpxZLmJny9wOIyIqyjTffhLiEi5m663AxFYwO/XFpKn123SJDyQqG4ZtI5bViiYD/70YfyCLG6X1hw27f9jezmfeobTflW55QmdHe1b8RTIi8SNjPuyswwDDP/mF3Bo7G7g4e18bvxOJ4T/39uIK0f78Pf3W/+AbDy7qZCi8sAde3dP/VhblJIFusZivWro5aiRlBett2ZeelYHdMotTxy+cWmKOo/HcTbsquSuiHNVieNw/0Jr71LY3rLsXnT32C7EMX6bLhVXlbHGIZh5i+zK3gdPXK8ronG8PbswpPCwmvq6pX/P7Cnt2Dsjvj4gz9ZiIcGicPm5Qm8ZrU43HKGYpMcz/rMwvoq1p2Zl47VMfhQnuWrsFl8/+sHtIRB7560sTqJCTmR5SReu3ADdzUbJq9Y5WV1jGEYZh4zu4KnL0PYqi9DeOlaDE9ttHf5s/Ib1KUnLCaLLjuaAanNQDROCsmRWTx+F032oAPUTbjpPnydJoNYCaiNsFh1A1od86U8y5cbZorSb1bhYZrMYrA6V65eJYQrN+mE4pBIGif1WJXP6hjDMMx8xoPgLcW6DbTwnD7taBVH6ts69e8Podtu7M2C0wNxoCuG++WklTS2PEqTVuzQLK7CLkZIS2j7N5bj9Lt2yxS07rvPLojw2ii+S+NgspvwQ7xmI0gldWf6VR6RJll6X88K/Q2cJotsufgNjeOJdO6qbRZCSbvOaON7m9uXyxmYOSvYonyWxxiGYeY3Ja7D845/e2nSpJBO1Gd3LpltglYehmEYhvBg4QWLld/oxMpPBwMjLkErD8MwDKMx5wUvv/tu9glaeRiGYRiNOS94DMMwDKPCrI3hTU9dNx9iGIZhmLLhSfCkH7yVEdTX6AdujuPM0AWcvZkXzREWPIZhGKaSeBa8eiFyozfJQwL5x+tEd/gWzpwaVBY9FjyGYRimkngaw5u8ltTFjriF0ZExTJDwhf11BsswDMMwfuFJ8BiGYRhmruGL4NWFG1FPll7KnRNYhmEYhqkUpQteTQu625ZidEh9/I5hGIZhKk1pgifEbtuGCDAyiBPXzIEMwzAMExxKELwGdOtid2yEuzIZhmGYYONR8MhjQjtaUxdY7BiGYZg5gSfBq2vrwPqaWzgzMm4OYhiGYZhA4mHhOVl3nULwzMeBCRfdm7zwnGEYhqkkHgTPH1jwGIZhmEriqUuTYRiGYeYaLHgMwzDMgoAFj2EYhlkQsOAxc5fwJ/jBT0/hBw9rE6XCD5/FT356FpvCpngFrEbbz55A0wrz8dnCrjx0/Ie470cPoNoc5BP1O0X6lEfm42NeMm1f0rOrnwrg+R5jgohHwWvAug0P4fFNmU8nuhvZUwJTYVJLkTIfU6B68wOoT13ExFVzyOwwm+WZOPJbfPhL7TNyzhwaDGazfrzeY0ww8ThLcylaG4HRa9pbT11bJx5pg0t/eOvQsms36vKOJjEZP4hkfEz/3lUYJ63HSWTiqKCYTqgL4dhO1GIUM2hFVWgUqf5DuJ7ORXGOE0G4dz/CIUN8M+mjSPSNISzKUxXfh0vZc9V/mz6Eof4BWJZZZ1r+Dop5HRXlLIZ1XtOJo0j2W/w+uhtre7r0cpjKX7Q8VucO1Pa8gEhItbwZ0njsp5eAP2zAq0Pi69oEfvJ94D/+NYrz5qhZyFrYAhwJSgMfnPKQRda24n0M/9/3MW0O9IA/6c12/Xi5x5ig4tHCu5UVO2IydU36w8t6QHcBNZpDh5+Wn4RoxOti+9EStYuzD2PpFtT17HFuWG1wTkc0+r2iIU7sxSUhYMl++isa594DLuKMIdWnnYv8iMZ7Woi4+ZhVg17bI8QCosGXYkcMIJmtl6T8PqZ/14TCe1525F0LIXSI7kBUCJuZ2qh2rFr8rcoe9b8
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T11:57:35.000Z" ,
"modified" : "2019-07-16T11:57:35.000Z" ,
"first_observed" : "2019-07-16T11:57:35Z" ,
"last_observed" : "2019-07-16T11:57:35Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"artifact--5d2dbbaf-1984-477b-b19b-48a7950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"name" : "D9_kDIyWsAY2tMM.png" ,
"content_ref" : "artifact--5d2dbbaf-1984-477b-b19b-48a7950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d2dbbaf-1984-477b-b19b-48a7950d210f" ,
"payload_bin" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A 1 s A A A C V C A Y A A A C u N u B c A A A g A E l E Q V R 4 X u y d T 2 w U V 7 b / v / 4 D t i P Z 6 X Z j k 4 C j N N h u O z E S o A H L h l l g Z 0 R i C B q S T V g h C 1 a z g C i K f r O b 1 e w i R W j w 4 q 1 e h F j B J h P E H 2 d Q g l k 8 c B Q Y A R J O 7 D Y O j Q Y S Y t N 2 x 7 w X b P C f 3 z n 3 V n d X V V d 3 V 7 X b 7 Q b O R 2 r Z X X X r 1 q 17 b 3 W d U + f P L a l o 715 E E T D 7 f / 9 r 3 y Q I O T C D j t 4 I A l d b c T 5 s 3 x f H T R l B E A R B E A R B W B o l o m w J g i A I g i A I g i D k n 1 L 7 B k E Q B E E Q B E E Q B G H p i G V L e H E I P M T B 3 l + B w R a c v F q J w I 5 h H O y k r y d a 8 V 3 U X j g 9 N X 8 + h I Y W 0 4 b o D Y z 99 w 3 M m j Y t J + r 8 a 0 z n z M t 1 x b D 303 s I h N d i 8 O p r G H V 9 n C A I g i A I g p A r p U A l q m t f R / v m N r z T U G n f T / j R 3 v E H f G D 5 b M R 6 W 5 n W z e b 9 b W i v d a p L E J a R a C X y o U N M n / k C P 3 y m P / d H 7 H t X g L x c l w / n P 2 / B Y D S G 93 u H s T d k 3 y 8 I g i A I g i D k m 1 K l G L 1 R i + q q T M r R D H 689 W / 887 v 45 y c 8 s O x / g s f / G U r s / + Y + s D 7 U i N Y q S y F B K A j R R 3 o u 67 + k q C x d U y k K l n 5 d l R i 92 o p j Z y s R 2 j e M j o B 9 v y A I g i A I g p B P S l k 5 + v b W z 3 h s 3 + O J G T y Y n E l 8 e x y d x D Q J d j W i b A k F J R c F 5 H k g z 9 c V D u J c e B a d O 2 L 2 P Y I g C I I g C E I e M W K 22 F V w I 6 r v D + H b + 0 m l S c P 71 m H 61 h C G n 9 h 2 p a P q d b y z u R Y P P B w j M V t C w V i z F Q 1 / 3 o q a h G U n h t m R G 7 h / 5 m 5 K X F Z K / F Q c V c c G q s O X 2 D R 75 U u M X T E U m J Y u v P 1 n U J 1 A H Z X D y A D t 86 H x 0 F Z U R O / i / n 8 P Y N o 4 r m J n F x p 2 b k A F 10 H t m M Z W 1 D m d M 5 + E I v h k 34 z H u C 9 B E A R B E A T B C y 6 z E V b i L R W T 1 Y b 2 B j + q 7 b v N V P n R G l o H R H 92 r W g J Q s F g J Y g V n k e k / B h x W T 98 d g n 3 h 6 f s J b N A C t r / X E r E d o 2 R o l a x s 5 u U J H O Z D a h r j e D + F z f o v F v R u J O U r 89 I y Q q Q k h Z P w E H t a S R F a / b M l z p G b B j J f c t J 2 I c w q X I B c S U U B E E Q B E F Y N l w o W 1 P 4 P h 6 L F Z 5 E d c N G / K n Z b y 8E1 G 7 U y T E 2 b 8 R b d M z w f a / C q y A s N z 7 U / X G D y i 5 o t W K x Z S v m z Y r 0 6 C 4 m R p J u e L N R P t 6 H C o v y Q m V M 55 m + w p a q K S o b 32 + 0 Z 2 Q A 94262 L I 1 U c C k H I E 1 d k u 2 I A i C I A i C k C 9 c K F t J H k / + g m / D p E Q F 1 q U m v 5 j 8 y U i Q M Y T v f 69 S 2 Q 1 T y g j C i u L X y t A j j 4 q V I z 7 U 7 O x C 4 + F D e P u v h 7 S 1 z F 4 k K 7 o 9 s 4 / k x Y Q g C I I g C M K L i C d l S / H k S Z b k F z N 4 M D q G H 59 U 4 q 0 G B w u Y I L w A 1 P z 5 Q z T s 9 G P 6 f 7 T 73 w 9 f L G N 81 T I S z 3 A o C I I g C I I g 5 B / v y l Z V F W p I o Z q W e C z h u c N w 4 V v j y 8 E K Z U b H X M 1 e u W R x J c y V i j U r 8 F I i F E O I e i G v W Q 4 F Q R A E Q R A E C y 6 U r U p U x 61 Y V X 60 h 0 g w f D K J B 2 Z l i 7 a v T 6 z T V Y n 1 D Y 14 i 455 E B X 3 K K G Y i G H i f + 4 C g a 1 o / L P O / q c h 5 W t N M q t g d r T S V t E a r 4 N d C s 31 u e U u p j k + q y W I G p V Y g + v 5 E A 0 F S J D R 3 P I b E H 5 N M h E K g i A I g i A s I y U H j v 6 / R f t G 5 k H 43 / h + E i q N e / v m d V h v b J + O / o T v R 6 e s 63 L V b s Q 7 p I T V x L 8 / m c K P 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T11:58:02.000Z" ,
"modified" : "2019-07-16T11:58:02.000Z" ,
"first_observed" : "2019-07-16T11:58:02Z" ,
"last_observed" : "2019-07-16T11:58:02Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"artifact--5d2dbbca-5730-47f3-a275-49d6950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"name" : "D9_kITnWsAAx7t1.png" ,
"content_ref" : "artifact--5d2dbbca-5730-47f3-a275-49d6950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d2dbbca-5730-47f3-a275-49d6950d210f" ,
"payload_bin" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A x o A A A D 3 C A Y A A A C a c i K T A A A g A E l E Q V R 4 X u y 9 X 2 w U R 7 b H / 7 X N Y h v F Z s Y D J t i O m G A 8 m G s k j B Y s T P Y B O x E J l 7 D L 3 R c s X Q m h Z B 82 D + S n K N J 92324 e b t S F P 3 C Q / b h 3 g j x R F 6 y Z A k 3 C U r A L w G E i W I k f I E x T i Z a m z 8 m Y w / 2 / r D N 4 v C r U 9 U 9 / W f 6 T 81 M z 7 g 9 r o 804 O m u 6 T 5 d p 7 r 7 n K p T d a p q e / q f I Q Q s / H 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
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-17T13:57:55.000Z" ,
"modified" : "2019-07-17T13:57:55.000Z" ,
"first_observed" : "2019-07-17T13:57:55Z" ,
"last_observed" : "2019-07-17T13:57:55Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"artifact--5d2f2963-b3a8-45e4-9106-0732950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"name" : "D9_m9yWWkAM7omk.png" ,
"content_ref" : "artifact--5d2f2963-b3a8-45e4-9106-0732950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d2f2963-b3a8-45e4-9106-0732950d210f" ,
"payload_bin" : " i V B O R w 0 K G g o A A A A N S U h E U g A A B C 4 A A A A 7 C A Y A A A C 0e8 u d A A A d 10 l E Q V R 4 X u 2 d w Y s s y X G H c 9 Y G C S z Q H t S r N Q i k g 0 G P 7 r H 1 D g b v w T B 9 s A 8 + S Y L X b 3 U w W L r O x R c f 7 N N 0 n + y / Y O y D w T o Y 5 D f 9 s P d g s A 8 G 9 w O D d 2 + 7 M N 0 83 Z 5 A h t W 2 D m v w Q Q u C c U Z W Z n V W V F Z W Z F V W T 0 3 P 74 N m p q u i o z I j M r M r o q K q z 9 R c 3 a n N U g E A A A A A A A B A H q Z K 3 S 2 U W l 0 r t d z z n d 2 Y z Z W 61 X r P t c 4 t 3 / n Q I P v M 6305 q T 6 C R 8 V C z / c b / f d s z f d Y J n p s X y q 10 / u f 7 w 6 b l 3 r b 1 d 5 + z p 8 X V f m 31 P z w G Q A A A A A A A M B j g A I E H R T M + P b M T C d 8 S x 0 K X O 6 u D q + b K Z e Q w f U s B c e + L x b a 8 N t d P T m x 3 R Y B 22 L E b T 8 W F A j f z l U x V j 2 / L r j g k R h b e 8 b G Q t t l t e F b P f Z K U b 5 i + k 51 M 60 R W 5 f c 1 A J n 4 a T d W 2 r D N w E A A A A A A A B O k j K 4 p 2 i L r m j 2 T B Y 0 o g O Q 1 b 4 I 9 m I J E t q v 1 j p Y W d n X u t i W m n S 4 u b J X b Z 0 e H f w 8 u x y g X 5 m Y 6 f 7 t P r P 2 I R v Y Y H j h g r v E / p 8 q s 4 v C P s + t X 2 l M 3 d x j p m B s 7 R k N 0 y K B Q 0 k 3 P 6 l j E j 0 e q 1 e F D d 12 W o 9 o z L + / 8 a W C o O I C A A A A A A C A x 4 K 5 s q l f 5 z b w O n 9 V b N + 5 K 54 Z W V 5 b / V 6 C h M d 46 z W 7 l W R n 8 h h J g T s F / x T 8 n N M H H f a 92 e d t H g s p / X v s U J L A u X Z N W Z 1 J c y L s G I y t P W P i Z l Z N H q q L a v J w u z l s p / X A J B v D F R Y c V F w A A A A A A A D w G K C r m x R E r N a H Q I E C C b p q f H W Z X u U g w Q Q q N o i h Y 1 J l B D 8 O b e t T e k / V C + t N I P i x S R A q Y R 8 b L l G 0 29 q E i y 2 R p z g Y e F g f O l z g W / P 1 s R h b e 0 b G c 5 Y 8 X G l 7 L e a H x A 49 w 4 U q s F 5 e F + v C 2 l Y a 8 T U h A C o u A A A A A A A A e A x Q B Q Q l K U L k f I h m k H 1 R 5 U F x z d X 8 s J m S F g s K 2 t 1 V W u 9 q 9 i l D l S 90 r z 8 F v F c 2 s X I z L 0 r t 6 a 25 k g / A A 4 O S i I 3 o f S 8 u q l V W r n r F X x M a Q M U F A A A A A A A A j w U K i K 8 W 1 S u g V 7 R 9 y K S F R + W W F H t f / L r n 5 W p K A v h X d U u c / h E m A a j P d K 8 / J W 3 W s + K q M w V 0 p h / s q j 4 A o 2 d f J O H 4 L V A m k W H 3 u V t q + G 1 p 5 r 3 d F w E V F w A A A A A A A D w W 6 L Y J C i L c M y d u L 6 p X / X N B C R H + Y E y T J J l 4 i Q o X 7 L x z k D E V G I e 3 I i j g X 2 u 9 t / 4 H 7 X u z z 9 s 8 G n b 2 w Y 6 X y v z c o y u b N 7 f y b L g w A C N n X 78 t h B K H N N / L 8 W z n e 6 W 6 w s q E f m G H c a b m 6 k 5 t l n w 7 A A A A A A A A 4 G S h e 8 v n S p 0 P e H 8 + P R i T J y 8 o k f D c q 4 C g Z A Y l T x x 0 y w p l L q a b g 1 x T M o P r o m d 4 U B D k G P z 2 l w x w G / k P f n z s G N v o v / R L M 2 N g b O 0 Z I 61 z k B K K l 9 X q C j 6 P G + b 7 m V q q O 7 V c 8 u 0 A A A A A A A A A 0 B 8 K Z p 7 p w O R 8 w / c A A I A I P O M C A A A A A A A A M B A T p Z 7 p 18 u h y j o A A I 8 B V F w A A A A A A A A A A A B g t K D i A g A A A A A A A A A A A K M F v y o C A A A A A A A A A A C A 0 Y K K C w A A A A A A A A A A A I w W V F w A A A A A A A A A A A A g D v 1 U 6 d 1 V / W e O j w A q L g A A A A A A A A A A A N D A R K n b K 6 U W O 6 X O r p W a L v T 7 O R c a F F R c A A A A A A A A A A A A J 49 N Q C w n 1 f e t F R R 7 p c 5 X S p 2 t D / + f b 7 j Q o J y p u b p T m + V h y / J S q S v d g e 2 r 5 s Y 4 m b V u + P M d 36 s K A 2 i Z m X t P n b v W O n 0 Z F d e z W I Q N + F w b i e z F K e U p C + Q J 1 P Q 0 t I X L r b T M c m / f 6 O 13 i 8 M + j t 8 m K p / x R X l 7 + X E c 3 N 5 c r t I e j 5 g N f Z r s U 9 l n a T o W E d P j 2 u L g f X f E 2 s z b 4 g j J x v Q 4 u D 7 e p q 7 + 4 s f k c h U b T t h 8 s H A 7 c x 0 O v 0 25 Z H y a f C r W w / u 3 r 84 x i Z 5 W m a l g D k p k l O B Y q l n G 93 u T j E R P q o y D y 6 b q a Z L x 158 m m S F 84 d N n H D b J p P R r N t f j + I L t Z G O Z a N P D 6 d M v B 5 e V 9 J 3 r i a 51 C f 7 i x 0 t d x 3 L a u U k m x e 9 E L h m C f w + 2 f b c 7 J M c q 158 j + s u R o 1 + G S f / v C w e X j f X b w f X w f v H 9 r X o k v h D I 7 O a Z 5 g W 3 r 4 X 7 n e C 6 Q j K 97 W O J r j 9 K r s d R y n d c V 7 l c 13 P + q J 7 A f k e q v 1 r 1 q G a Z X O c t q e u q T 2 d / S X w h k b H / 5 x y H b f E y 19 U l L h g M e / y X 7 n j 2 / c 4 b K y G 4 / R w 8 J h q Q M 7 V U d 2 q 5 t G 9 d R 7 Q T r q b 1 B d O d c K x 0 A 58 t G j p o B 1 D F k V r v j f b O c / t e o s c 4 X N W D 4 y D + A G C T g m M G m g p / U b q B W b a v Z Q C Z z 0 0 O u s i h p I A v E L U F Q c X b y D 8 X a o / E h i U R + 0 i O V R L R Y w a z t 43 b h p C 0 W W I f i R 6 C t 4 l z N H 9 Z u / n t r M k 4 P U p w L N V f p i T i U 5 G e a f t 8 l + i R y I Q I j T M O l 5 E c a 2 w y R N t 4 l u j J J R O C 2 z l E o 8 y k 3 z j M I e P m p D //3YlJ6jwt6dkvIoffJWtdCO4v/rku61hOO49NxvRj78lMi/WxFjiouB6JTIgh/EXk6leu7wsi17xoO2+R6AkR0sXxZaj8Ocu8mCScb7SMjVz2kaw/Ej0lto8z+p+NAYkefvxQ30Pw/kv0tLYnxV8qokeNT6akp79CcF+E4DJZx6HtU1O8zHXXfGo/3+b33LhjVNDHOtfteMHaE8PoCfT7CFSfcTHTo2qmO7DWrdhqoy4m3s6pbeQqbtCbBftSIvaHLyWpnhSW+piznczYy40yA2bqNkyKQUdfwG6cbjfF/89mTiiA+9zm4DQaoH4b3L5FeTABkvYk2rDRPpJjeTTq0Tr0LvXcKVG271a/k0lpcyNCPbRoxE5qiKP5K8B2WxxrOuF7jkujT4W0zvchcbbfRBZOicwDQDKe7xWJnSMyfcfhUCz1l/JKj+erOd8jo2+/cvm901rH/eXeJ651EvraeRRo+zzTLzp/KtkV/Vr0tI+IofyVsV+5vi+yzIup4LylK9wXIQQyueZF7XxDMjYy2qfT+hOh17oq6XsI7q+uegTU/PXA6eWvENwXIQIyOcdhNF7uODaO4Xdqx5m2w9l1cSxKkrj/HwjVZ1yQ87baqVvtjJd7ZmD6kmjrnF3oXsaEJHpS0Mc0GekN3xFm9g57T4NP/137E8r2YzYt9oVYzItBu8o1ES2i9qTYMGIf0bG87Y16yKZ706wDdgxNnb1T2hxDqIfGcqituUmy4diI+FSEZL4PiGQOSmQeAscaz12R2LlRpu84HBgzt+1YTyJDv+7T79xfQ691ne08Fux3YPmdZ6GTUDqnGprB/JWrXxm/L3LMC9F5S0e4L0JIZIgh5oVkbAxpn170XFclfQ/B/dVVz6Ojp79CcF+EkMj0IRYvj3VsUAUX/RKIeV02t8OXu53zvTIqx9Kv5YRLdMaruJgUWXX3pUIGTzWwSwokfZnFmFY7Hlq4XQY/dvXd5+qikF/b9yaztT8szlT+QqWMKy1DNpna7RUmRTbNDFq+z2dS2G8nbBvRqT0RYvZJOVZMj6GhbTM6xrGxCwRlQf3x0zoBj+ivxkVVMOZzybT6lIjoSZrvET0lEhnHRDAHYzIpx4oh0dNXJmU8x/SkkKInZmdHRKbvOEyih57KWibQ07tfQ/p90rLWBfyVtNaltscj1c4iJHoyyJAtZhcHH9HJ20Lb7P2NL6Va9SQzsL9y9Cvb98U047zgdrDUzlva9PgEfFFDIsPoMy/4+YZ4bAxhH2LSsP4I9PRdV8V995nU/ZWkJ9KeENxfJYl6Gjminr7+qhHwRQ2JDDHpOA4n8Xg5aWx4NPo9A+XtfqtqxQWHqtme7azMulj3/ed0SKBbcvixnl2m62ngUHFRlr1YB24/U8bAlfKXFoyzMkElNmWn9YvK5cgYS+8YNBhoQLVl8sgR5QDcB75sLeU9O6tDYiOEy6a1HZcmLA1eZ9MSNinoFXKotD1NSO1DxI7VpseVN/nljPQZ/4FOSQTs4/tdCt03608c1TIBU/wVak/MhoQ/Dqkdq3V14ZCM+VwybT4l2vRI53ubHqmMj2QONsmIj9Xid4meXDJE23iW6gn1q5MeS5OdfZpkcozDksz9cpjvQg+Jnpz9yuZ
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5d2f2979-7440-468f-9433-4003950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-17T13:58:17.000Z" ,
"modified" : "2019-07-17T13:58:17.000Z" ,
"first_observed" : "2019-07-17T13:58:17Z" ,
"last_observed" : "2019-07-17T13:58:17Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5d2f2979-7440-468f-9433-4003950d210f" ,
"artifact--5d2f2979-7440-468f-9433-4003950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5d2f2979-7440-468f-9433-4003950d210f" ,
"name" : "D9_nE5vW4AALIhL.png" ,
"content_ref" : "artifact--5d2f2979-7440-468f-9433-4003950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5d2f2979-7440-468f-9433-4003950d210f" ,
"payload_bin" : "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"
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T11:41:31.000Z" ,
"modified" : "2019-07-16T11:41:31.000Z" ,
"labels" : [
"misp:name=\"microblog\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "text" ,
"object_relation" : "post" ,
"value" : "Very nasty Linux backdoor with multiple components (link: https://www.virustotal.com/gui/file/c69ee0f12a900adc654d93aef9ad23ea56bdfae8513e534e1a11dca6666d10aa/detection) virustotal.com/gui/file/c69ee\u2026\r\n\r\n- Kills & uninstalls AV: clamav, avast, avg, drweb, esets\r\n- Very persistent\r\n- Uses Gates malware\r\n- Uses Brootkit\r\n- Uses CVE-2016-5195 to get root\r\n- Infects other systems from known_hosts, .bash_history" ,
"category" : "Other" ,
"uuid" : "5d1619e6-11e4-4450-a888-9e52950d210f"
} ,
{
"type" : "url" ,
"object_relation" : "url" ,
"value" : "https://mobile.twitter.com/michalmalik/status/1143879771878830080" ,
"category" : "Network activity" ,
"to_ids" : true ,
"uuid" : "5d1619ea-afb0-498f-88ce-9e52950d210f"
} ,
{
"type" : "text" ,
"object_relation" : "username" ,
"value" : "michalmalik" ,
"category" : "Other" ,
"uuid" : "5d1619ec-4c38-40ac-8690-9e52950d210f"
} ,
{
"type" : "datetime" ,
"object_relation" : "creation-date" ,
"value" : "Jun 26, 2019 3:52 PM" ,
"category" : "Other" ,
"uuid" : "5d1619ee-2ac8-46e6-bb0f-9e52950d210f"
} ,
{
"type" : "url" ,
"object_relation" : "link" ,
"value" : "https://www.virustotal.com/gui/file/c69ee0f12a900adc654d93aef9ad23ea56bdfae8513e534e1a11dca6666d10aa/detection" ,
"category" : "Network activity" ,
"to_ids" : true ,
"uuid" : "5d161ff9-fdb8-40fe-a9ec-49f1950d210f"
} ,
{
"type" : "url" ,
"object_relation" : "link" ,
"value" : "https://t.co/RmWa9pD5G4?amp=1" ,
"category" : "Network activity" ,
"to_ids" : true ,
"uuid" : "5d161ff9-58c4-46ea-af6d-4646950d210f"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "microblog"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5d162587-51e8-4414-8863-4192950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-06-28T14:34:47.000Z" ,
"modified" : "2019-06-28T14:34:47.000Z" ,
"pattern" : "[file:hashes.MD5 = '1db902385b4480a76e4527605eb9f825' AND file:hashes.SHA1 = '5056b7dc21749daae9177cf7f8a02a44947a3115' AND file:hashes.SHA256 = 'c69ee0f12a900adc654d93aef9ad23ea56bdfae8513e534e1a11dca6666d10aa']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-06-28T14:34:47Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--5d2dba27-3ecc-4f52-aff4-f71a950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T12:00:23.000Z" ,
"modified" : "2019-07-16T12:00:23.000Z" ,
"labels" : [
"misp:name=\"microblog\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "text" ,
"object_relation" : "post" ,
"value" : "Michal Mal\u00edk\r\n@michalmalik\r\n- It periodically tries to detect a running miner and kill it (it can also kill itself & Gates malware - to update)\r\n- Brootkit is \"installed\" to /etc/profile.d/emacs.sh - this confirms that EMACS is indeed a rootkit\r\n- The remote host is auth.to0ls[.]com" ,
"category" : "Other" ,
"uuid" : "5d2dba28-2058-4824-9e68-f71a950d210f"
} ,
{
"type" : "text" ,
"object_relation" : "type" ,
"value" : "Twitter" ,
"category" : "Other" ,
"uuid" : "5d2dba31-56f0-4fa4-b51d-f71a950d210f"
} ,
{
"type" : "url" ,
"object_relation" : "url" ,
"value" : "https://mobile.twitter.com/michalmalik/status/1143883668034871296" ,
"category" : "Network activity" ,
"to_ids" : true ,
"uuid" : "5d2dba3d-2468-4d69-b7af-f71a950d210f"
} ,
{
"type" : "text" ,
"object_relation" : "username" ,
"value" : "michalmalik" ,
"category" : "Other" ,
"uuid" : "5d2dba49-c4a4-47b7-b660-f71a950d210f"
} ,
{
"type" : "datetime" ,
"object_relation" : "creation-date" ,
"value" : "Jun 26, 2019 4:08 PM" ,
"category" : "Other" ,
"uuid" : "5d2dba55-8fb4-41ca-9234-f71a950d210f"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "microblog"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5d2dce6e-3030-447f-b917-4f82950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T13:17:34.000Z" ,
"modified" : "2019-07-16T13:17:34.000Z" ,
"pattern" : "[(network-traffic:dst_ref.type = 'domain-name' AND network-traffic:dst_ref.value = 'vpn.to0ls.com') AND network-traffic:dst_port = '443']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-07-16T13:17:34Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "network"
}
] ,
"labels" : [
"misp:name=\"ip-port\"" ,
"misp:meta-category=\"network\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5d2dceaa-69ac-4ae6-b87a-4f7e950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-16T13:18:34.000Z" ,
"modified" : "2019-07-16T13:18:34.000Z" ,
"pattern" : "[(network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '115.231.218.64') AND network-traffic:dst_port = '8226']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-07-16T13:18:34Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "network"
}
] ,
"labels" : [
"misp:name=\"ip-port\"" ,
"misp:meta-category=\"network\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5d2f24d8-bf18-4298-8ef2-49c8950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-17T13:38:32.000Z" ,
"modified" : "2019-07-17T13:38:32.000Z" ,
"pattern" : "[file:hashes.SHA1 = '2a9bf4ee7d437ae0bc67d2da1e711aaa0d1aa302']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2019-07-17T13:38:32Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "x-misp-object" ,
"spec_version" : "2.1" ,
"id" : "x-misp-object--5d2f295b-c798-45fd-8434-4942950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2019-07-17T13:59:42.000Z" ,
"modified" : "2019-07-17T13:59:42.000Z" ,
"labels" : [
"misp:name=\"microblog\"" ,
"misp:meta-category=\"misc\""
] ,
"x_misp_attributes" : [
{
"type" : "text" ,
"object_relation" : "post" ,
"value" : "Artefacts from one of the Gates files (syn, 2a9bf4ee7d437ae0bc67d2da1e711aaa0d1aa302)\r\n- vpn.to0ls[.]com:443\r\n- 115.231.218[.]64:8226" ,
"category" : "Other" ,
"uuid" : "5d2f295b-51dc-4be8-bd90-49ae950d210f"
} ,
{
"type" : "text" ,
"object_relation" : "type" ,
"value" : "Twitter" ,
"category" : "Other" ,
"uuid" : "5d2f295b-797c-4c7a-bb36-4a4e950d210f"
} ,
{
"type" : "url" ,
"object_relation" : "url" ,
"value" : "https://mobile.twitter.com/michalmalik/status/1143887109599748097" ,
"category" : "Network activity" ,
"to_ids" : true ,
"uuid" : "5d2f295b-2b24-4772-a6b1-471c950d210f"
} ,
{
"type" : "text" ,
"object_relation" : "username" ,
"value" : "michalmalik" ,
"category" : "Other" ,
"uuid" : "5d2f295b-2454-41db-a8fe-4d10950d210f"
} ,
{
"type" : "datetime" ,
"object_relation" : "creation-date" ,
"value" : "Jun 26, 2019 4:21 PM" ,
"category" : "Other" ,
"uuid" : "5d2f295b-e34c-4fa9-a086-4160950d210f"
}
] ,
"x_misp_meta_category" : "misc" ,
"x_misp_name" : "microblog"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--ae6d6c1a-397b-4f1a-bb05-5945268c7541" ,
"created" : "2019-06-28T14:30:46.000Z" ,
"modified" : "2019-06-28T14:30:46.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"target_ref" : "observed-data--5d162440-dd38-482b-9b3f-4526950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--631b7191-337c-4348-bc29-fbe8373e336f" ,
"created" : "2019-06-28T14:31:23.000Z" ,
"modified" : "2019-06-28T14:31:23.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"target_ref" : "observed-data--5d162462-55a0-4486-9309-4dd1950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--491e37d0-0186-48d8-b4bb-277cb9391551" ,
"created" : "2019-06-28T14:32:00.000Z" ,
"modified" : "2019-06-28T14:32:00.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"target_ref" : "observed-data--5d16244a-c204-489c-af1b-9e7b950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--414ec4c7-ce2d-4714-8abc-5bbdc3e5abaf" ,
"created" : "2019-06-28T14:32:23.000Z" ,
"modified" : "2019-06-28T14:32:23.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d1619e6-1cb0-4052-ad83-9e52950d210f" ,
"target_ref" : "observed-data--5d162456-1928-4d99-bdbd-4d1f950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--2f39d4b4-4645-4e2b-8d21-9999574970d4" ,
"created" : "2019-07-16T11:59:02.000Z" ,
"modified" : "2019-07-16T11:59:02.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d2dba27-3ecc-4f52-aff4-f71a950d210f" ,
"target_ref" : "observed-data--5d2dbb91-1700-4767-9fbc-6552950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--abf436df-b3d9-4fb7-b9cc-3cb327707aa1" ,
"created" : "2019-07-16T11:59:50.000Z" ,
"modified" : "2019-07-16T11:59:50.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d2dba27-3ecc-4f52-aff4-f71a950d210f" ,
"target_ref" : "observed-data--5d2dbbaf-1984-477b-b19b-48a7950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--8bb3d046-adc6-4911-8885-9aa0ea6e5db3" ,
"created" : "2019-07-16T12:00:23.000Z" ,
"modified" : "2019-07-16T12:00:23.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d2dba27-3ecc-4f52-aff4-f71a950d210f" ,
"target_ref" : "observed-data--5d2dbbca-5730-47f3-a275-49d6950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--39b20439-473e-4a1e-a431-a56ffd611ff2" ,
"created" : "2019-07-17T13:58:51.000Z" ,
"modified" : "2019-07-17T13:58:51.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d2f295b-c798-45fd-8434-4942950d210f" ,
"target_ref" : "observed-data--5d2f2963-b3a8-45e4-9106-0732950d210f"
} ,
{
"type" : "relationship" ,
"spec_version" : "2.1" ,
"id" : "relationship--d1b4ee88-2986-45f1-8c54-05d5a1752929" ,
"created" : "2019-07-17T13:59:42.000Z" ,
"modified" : "2019-07-17T13:59:42.000Z" ,
"relationship_type" : "contains" ,
"source_ref" : "x-misp-object--5d2f295b-c798-45fd-8434-4942950d210f" ,
"target_ref" : "observed-data--5d2f2979-7440-468f-9433-4003950d210f"
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
]
}
