misp-circl-feed/feeds/circl/stix-2.1/5a26afc4-90d8-407c-b637-4bf9950d210f.json

{
    "type": "bundle",
    "id": "bundle--5a26afc4-90d8-407c-b637-4bf9950d210f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T11:14:18.000Z",
            "modified": "2017-12-11T11:14:18.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "grouping",
            "spec_version": "2.1",
            "id": "grouping--5a26afc4-90d8-407c-b637-4bf9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T11:14:18.000Z",
            "modified": "2017-12-11T11:14:18.000Z",
            "name": "OSINT - Mobile banking Trojan sneaks into Google Play targeting Wells Fargo, Chase and Citibank customers",
            "context": "suspicious-activity",
            "object_refs": [
                "observed-data--5a26afd6-8e90-4d3b-8279-4a5c950d210f",
                "url--5a26afd6-8e90-4d3b-8279-4a5c950d210f",
                "x-misp-attribute--5a2e4e9c-bab4-4c9b-aaa4-d653950d210f",
                "indicator--5a2e5acf-8040-428f-a08a-4780950d210f",
                "indicator--5a2e5ad0-d85c-4167-bbbc-4dc9950d210f",
                "indicator--5a2e5ad1-ccb8-4352-963b-4fc8950d210f",
                "indicator--5a2e5ad1-d998-4e3a-8db6-4f3f950d210f",
                "indicator--5a2e5ad2-b834-4e13-9524-42e0950d210f",
                "indicator--5a2e5ad3-3310-432e-a3c5-4105950d210f",
                "indicator--5a2e5ad4-d540-4761-b6b9-4d38950d210f",
                "indicator--5a2e5ad4-8450-49af-8464-4f6f950d210f",
                "indicator--5a2e5ad5-568c-4ebb-b649-40bf950d210f",
                "indicator--5a2e5ad6-8a98-43ab-9e25-4f90950d210f",
                "indicator--5a2e5ad7-0130-45fd-a5e4-43f0950d210f",
                "indicator--5a2e5ad8-0180-4d6c-a56f-4ff0950d210f",
                "indicator--5a2e5ad8-9774-451a-83fc-4f34950d210f",
                "indicator--5a2e5ad9-16c4-4f59-98cc-4130950d210f",
                "indicator--5a2e5ada-51f0-49f6-859d-4590950d210f",
                "indicator--5a2e5ada-14f8-4054-ae64-47ab950d210f",
                "indicator--5a2e5adb-3ee4-4bdc-b77f-4dd0950d210f",
                "indicator--5a2e5adc-3924-49a9-895f-453b950d210f",
                "indicator--5a2e5add-81fc-472d-a058-40e8950d210f",
                "indicator--5a2e5add-0a44-4d53-96e2-4acf950d210f",
                "indicator--5a2e5ade-d46c-41ac-85f4-40e0950d210f",
                "indicator--5a2e5adf-e3e8-4f14-9bdf-4813950d210f",
                "indicator--5a2e5ae0-f164-4fa4-8563-47f4950d210f",
                "indicator--5a2e5ae0-a140-4f75-8392-4adb950d210f",
                "indicator--5a2e5ae1-2328-4794-bbd1-48dc950d210f",
                "indicator--5a2e5ae2-5f00-455c-b0bc-44c3950d210f",
                "indicator--5a2e5ae2-dc6c-4451-9812-4090950d210f",
                "indicator--5a2e5ae2-2b64-4ecb-9f01-402e950d210f",
                "indicator--5a2e5ae2-97cc-4663-beba-43dd950d210f",
                "indicator--5a2e5ae2-0020-476f-8bab-4ace950d210f",
                "indicator--5a2e5ae2-9c30-4756-89ae-40cc950d210f",
                "indicator--5a2e5ae2-5398-4a7e-b3fc-4b4c950d210f",
                "indicator--5a2e5ae2-65a0-49d8-96e6-4a9a950d210f",
                "indicator--5a2e5ae3-2b60-4a47-9758-4839950d210f",
                "indicator--5a2e5ae3-1488-4f02-8aaf-47a9950d210f",
                "indicator--5a2e5ae3-f2c0-4566-87bf-4594950d210f",
                "indicator--5a2e5ae3-00c4-438f-b6ee-4805950d210f",
                "indicator--5a2e5ae3-83f8-4ef6-85ad-4f4c950d210f",
                "indicator--5a2e5ae3-37c0-45ea-8598-4704950d210f",
                "indicator--5a2e5ae3-2df0-45cd-8eb3-45f0950d210f",
                "indicator--5a2e5ae3-f928-4ddf-a0c4-4e63950d210f",
                "indicator--5a2e5ae3-7078-4e85-ba82-4329950d210f",
                "indicator--5a2e5ae3-d120-4f42-946a-4a78950d210f",
                "indicator--5a2e5ae3-9c24-4a91-8769-43e6950d210f",
                "indicator--5a2e5ae3-85e8-45e6-b20f-47a6950d210f",
                "indicator--5a2e5ae3-0220-4645-b676-49ef950d210f",
                "indicator--5a2e5ae3-4378-4a54-ad7e-4a37950d210f",
                "indicator--5a2e5ae3-4480-43c6-9c92-4f9a950d210f",
                "indicator--5a2e5ae3-03a0-4e1c-b571-4d95950d210f",
                "indicator--5a2e5ae3-d66c-4c4c-87bd-4f8e950d210f",
                "indicator--5a2e5ae3-bc9c-406e-9365-4fe1950d210f",
                "indicator--5a2e5ae3-1cc8-4d9a-959c-48c1950d210f",
                "indicator--5a2e5ae3-ae98-4d6a-b71d-4f5d950d210f",
                "indicator--5a2e5ae3-f75c-4330-9c52-48cf950d210f",
                "indicator--5a2e5ae3-3788-43c3-9e47-4d31950d210f",
                "indicator--5a2e5ae3-eeb4-4edc-9b65-4dcf950d210f",
                "indicator--5a2e5ae3-7850-4936-944d-46ae950d210f",
                "indicator--5a2e5ae3-8d44-4d96-a29a-443e950d210f",
                "indicator--5a2e5ae3-4e10-4ce2-a8d8-4d88950d210f",
                "indicator--5a2e5ae3-d1d0-4186-9494-4d9c950d210f",
                "indicator--5a2e5ae3-eeb0-407c-923c-4484950d210f",
                "indicator--5a2e5ae3-7ac8-407b-8cd4-48d6950d210f",
                "indicator--5a2e5ae3-edfc-4a18-9f84-4bfe950d210f",
                "indicator--5a2e5ae3-6044-40dc-81f1-4773950d210f",
                "indicator--5a2e5ae3-fe78-45d2-ace9-4f3c950d210f",
                "indicator--5a2e5ae3-e0b8-4bc0-9bdc-417d950d210f",
                "indicator--5a2e5ae3-b624-413a-9836-445c950d210f",
                "indicator--5a2e5ae3-c7f4-45d7-bcbd-4fe3950d210f",
                "indicator--5a2e5ae3-1588-415e-9439-4ac6950d210f",
                "indicator--5a2e5ae4-1bac-4e5b-974e-45e4950d210f",
                "indicator--5a2e5ae4-39ec-4ecb-abd1-4c76950d210f",
                "indicator--5a2e5ae5-67b0-4cce-a3c4-4e62950d210f",
                "indicator--5a2e5ae6-8e98-4fd6-9ab8-4ed5950d210f",
                "indicator--5a2e5ae7-e7b0-41e7-94ae-4175950d210f",
                "indicator--5a2e5ae7-57ec-4dc2-9124-4840950d210f",
                "indicator--5a2e5ae8-9188-429a-82b3-4804950d210f",
                "indicator--5a2e5ae9-79f8-4724-bffd-49a9950d210f",
                "indicator--5a2e5ae9-0bc0-4ea8-9d2b-4a9b950d210f",
                "indicator--5a2e5aea-1b54-41a5-abec-4c68950d210f",
                "indicator--5a2e5aeb-b328-4c61-a0b3-4c94950d210f",
                "indicator--5a2e5aec-e9a8-4fe4-8785-47e9950d210f",
                "indicator--5a2e5aec-62bc-4ca4-bb67-4faf950d210f",
                "indicator--5a2e5aed-9684-4d20-8b38-4150950d210f",
                "indicator--5a2e5aee-cf24-4faa-a625-4470950d210f",
                "indicator--5a2e5aef-3270-4030-ac83-4d05950d210f",
                "indicator--5a2e5af0-41e0-4368-b4ac-4b35950d210f",
                "indicator--5a2e5af0-746c-4f9a-8766-4d01950d210f",
                "indicator--5a2e5af1-c4a0-447e-8a4d-4c6a950d210f",
                "indicator--5a2e5af2-de68-4596-9ded-46a2950d210f",
                "indicator--5a2e5af2-01c4-4a68-b32d-4888950d210f",
                "indicator--5a2e5af3-65f4-47ee-ad2f-418f950d210f",
                "indicator--5a2e5af4-7724-4179-94ab-47de950d210f",
                "indicator--5a2e5af5-9628-46f9-b013-4b38950d210f",
                "indicator--5a2e5af5-01b8-48ca-8869-4c40950d210f",
                "indicator--5a2e5af6-50cc-4c5f-a6ad-4218950d210f",
                "indicator--5a2e5af7-ca84-462b-baa4-4751950d210f",
                "indicator--5a2e5af7-54a4-400a-8aad-4f3e950d210f",
                "indicator--5a2e5af7-e948-4725-8c04-4ec5950d210f",
                "indicator--5a2e5af7-3f08-43f4-a2ec-4094950d210f",
                "indicator--5a2e5af7-4170-401c-8d82-4372950d210f",
                "indicator--5a2e5af8-adf0-4860-b44d-497e950d210f",
                "indicator--5a2e5af8-8780-4a86-972f-4a4d950d210f",
                "indicator--5a2e5b3b-e6e4-4cbc-92c2-4960950d210f",
                "indicator--5a2e5b3b-0694-4e08-9443-4200950d210f",
                "indicator--5a2e5b3c-5398-4444-bca0-43ab950d210f",
                "indicator--5a2e5b3d-1fec-478b-8888-4256950d210f",
                "indicator--5a2e5b3e-2ebc-4707-831a-4a9b950d210f",
                "indicator--5a2e5b3f-5f10-4f2b-9c4e-42a7950d210f",
                "indicator--5a2e5b3f-1dd8-4931-87eb-4170950d210f",
                "indicator--5a2e5b40-7818-4a54-8c34-419e950d210f",
                "indicator--5a2e5b41-58e8-431d-9992-4a08950d210f",
                "indicator--5a2e5b41-b7a0-4e77-81d2-4acb950d210f",
                "indicator--5a2e5b42-2ea4-4b59-9399-4519950d210f",
                "indicator--5a2e5b43-ea74-4c30-82fc-45fa950d210f",
                "indicator--5a2e5b44-0c6c-4ff7-bcf1-413c950d210f",
                "indicator--5a2e5b44-4d10-472f-b727-4b49950d210f",
                "indicator--5a2e5b45-f8f0-4a54-93e9-4da5950d210f",
                "indicator--5a2e5b46-91e0-4d3a-96a5-4560950d210f",
                "indicator--5a2e5b47-bf64-40bc-8680-403f950d210f",
                "indicator--5a2e5b47-3de0-44d2-bd0a-42fa950d210f",
                "indicator--5a2e5b48-91c4-4f5e-b936-48b8950d210f",
                "indicator--5a2e5b49-9098-409e-bae6-4240950d210f",
                "indicator--5a2e5b4a-98e8-4880-be1d-4edc950d210f",
                "indicator--5a2e5b4a-edbc-486e-bcb9-42d4950d210f",
                "indicator--5a2e5b4b-7d78-458d-b10a-4941950d210f",
                "indicator--5a2e5b4c-b294-4ed8-ad6c-47a4950d210f",
                "indicator--5a2e5b4d-39b4-4b7a-8afd-49f8950d210f",
                "indicator--5a2e5b4d-bcf8-4001-8c50-49cf950d210f",
                "indicator--5a2e5b4e-fb38-4378-b8c5-4987950d210f",
                "observed-data--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
                "file--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
                "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
                "observed-data--5a2e60cd-1968-41fc-98db-4df5950d210f",
                "file--5a2e60cd-1968-41fc-98db-4df5950d210f",
                "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f",
                "observed-data--5a2e611d-f250-46fc-a644-44bf950d210f",
                "file--5a2e611d-f250-46fc-a644-44bf950d210f",
                "artifact--5a2e611d-f250-46fc-a644-44bf950d210f",
                "observed-data--5a2e61e2-3a44-4ef1-b432-4183950d210f",
                "file--5a2e61e2-3a44-4ef1-b432-4183950d210f",
                "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f",
                "observed-data--5a2e61ee-43c0-47f9-b246-45ac950d210f",
                "file--5a2e61ee-43c0-47f9-b246-45ac950d210f",
                "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f",
                "observed-data--5a2e628f-6938-4458-90b3-407b950d210f",
                "file--5a2e628f-6938-4458-90b3-407b950d210f",
                "artifact--5a2e628f-6938-4458-90b3-407b950d210f",
                "observed-data--5a2e62a1-b19c-42b7-b19f-4355950d210f",
                "file--5a2e62a1-b19c-42b7-b19f-4355950d210f",
                "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "workflow:state=\"incomplete\"",
                "type:OSINT",
                "Android Malware",
                "ms-caro-malware:malware-platform=\"AndroidOS\"",
                "ms-caro-malware-full:malware-platform=\"AndroidOS\"",
                "workflow:todo=\"expansion\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a26afd6-8e90-4d3b-8279-4a5c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-05T14:40:28.000Z",
            "modified": "2017-12-05T14:40:28.000Z",
            "first_observed": "2017-12-05T14:40:28Z",
            "last_observed": "2017-12-05T14:40:28Z",
            "number_observed": 1,
            "object_refs": [
                "url--5a26afd6-8e90-4d3b-8279-4a5c950d210f"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\"",
                "osint:source-type=\"blog-post\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5a26afd6-8e90-4d3b-8279-4a5c950d210f",
            "value": "https://blog.avast.com/mobile-banking-trojan-sneaks-into-google-play-targeting-wells-fargo-chase-and-citibank-customers"
        },
        {
            "type": "x-misp-attribute",
            "spec_version": "2.1",
            "id": "x-misp-attribute--5a2e4e9c-bab4-4c9b-aaa4-d653950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T09:23:47.000Z",
            "modified": "2017-12-11T09:23:47.000Z",
            "labels": [
                "misp:type=\"comment\"",
                "misp:category=\"External analysis\"",
                "osint:source-type=\"blog-post\""
            ],
            "x_misp_category": "External analysis",
            "x_misp_type": "comment",
            "x_misp_value": "The new version of BankBot has been hiding in apps that pose as supposedly trustworthy flashlight apps, tricking users into downloading them, in a first campaign. In a second campaign,  the solitaire games and a cleaner app have been dropping additional kinds of malware besides BankBot, called Mazar and Red Alert (Mazar was recently described by ESET and we won\u2019t dive into the details here). However, instead of bringing light, joy and convenience into their users\u2019 lives, the dark intention of these apps has been to spy on users, collect their bank login details and steal their money."
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5acf-8040-428f-a08a-4780950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:43.000Z",
            "modified": "2017-12-11T10:15:43.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'ar.nbad.emobile.android.mobilebank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad0-d85c-4167-bbbc-4dc9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:44.000Z",
            "modified": "2017-12-11T10:15:44.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'at.bawag.mbanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad1-ccb8-4352-963b-4fc8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:45.000Z",
            "modified": "2017-12-11T10:15:45.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'at.spardat.bcrmobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad1-d998-4e3a-8db6-4f3f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:45.000Z",
            "modified": "2017-12-11T10:15:45.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'at.spardat.netbanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad2-b834-4e13-9524-42e0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:46.000Z",
            "modified": "2017-12-11T10:15:46.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.bankwest.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad3-3310-432e-a3c5-4105950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:47.000Z",
            "modified": "2017-12-11T10:15:47.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.cua.mb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad4-d540-4761-b6b9-4d38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:48.000Z",
            "modified": "2017-12-11T10:15:48.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.nab.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad4-8450-49af-8464-4f6f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:48.000Z",
            "modified": "2017-12-11T10:15:48.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.newcastlepermanent']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad5-568c-4ebb-b649-40bf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:49.000Z",
            "modified": "2017-12-11T10:15:49.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.suncorp.SuncorpBank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad6-8a98-43ab-9e25-4f90950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:50.000Z",
            "modified": "2017-12-11T10:15:50.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.EurobankEFG']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad7-0130-45fd-a5e4-43f0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:51.000Z",
            "modified": "2017-12-11T10:15:51.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.adib.mbs']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad8-0180-4d6c-a56f-4ff0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:52.000Z",
            "modified": "2017-12-11T10:15:52.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.advantage.RaiffeisenBank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad8-9774-451a-83fc-4f34950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:52.000Z",
            "modified": "2017-12-11T10:15:52.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.anz.SingaporeDigitalBanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ad9-16c4-4f59-98cc-4130950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:53.000Z",
            "modified": "2017-12-11T10:15:53.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bankaustria.android.olb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ada-51f0-49f6-859d-4590950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:54.000Z",
            "modified": "2017-12-11T10:15:54.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bankofqueensland.boq']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ada-14f8-4054-ae64-47ab950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:54.000Z",
            "modified": "2017-12-11T10:15:54.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.barclays.ke.mobile.android.ui']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5adb-3ee4-4bdc-b77f-4dd0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:55.000Z",
            "modified": "2017-12-11T10:15:55.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bbva.bbvacontigo']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5adc-3924-49a9-895f-453b950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:56.000Z",
            "modified": "2017-12-11T10:15:56.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bbva.netcash']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5add-81fc-472d-a058-40e8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:57.000Z",
            "modified": "2017-12-11T10:15:57.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bendigobank.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5add-0a44-4d53-96e2-4acf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:57.000Z",
            "modified": "2017-12-11T10:15:57.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.bmo.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ade-d46c-41ac-85f4-40e0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:58.000Z",
            "modified": "2017-12-11T10:15:58.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.caisseepargne.android.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5adf-e3e8-4f14-9bdf-4813950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:15:59.000Z",
            "modified": "2017-12-11T10:15:59.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.cajamar.Cajamar']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae0-f164-4fa4-8563-47f4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:00.000Z",
            "modified": "2017-12-11T10:16:00.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.cbd.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae0-a140-4f75-8392-4adb950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:00.000Z",
            "modified": "2017-12-11T10:16:00.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.clairmail.fth']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae1-2328-4794-bbd1-48dc950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:01.000Z",
            "modified": "2017-12-11T10:16:01.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.cm_prod.bad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-5f00-455c-b0bc-44c3950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.comarch.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-dc6c-4451-9812-4090950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.csam.icici.bank.imobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-2b64-4ecb-9f01-402e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.csg.cs.dnmb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-97cc-4663-beba-43dd950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.db.mm.deutschebank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-0020-476f-8bab-4ace950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.db.mm.norisbank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-9c30-4756-89ae-40cc950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.finansbank.mobile.cepsube']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-5398-4a7e-b3fc-4b4c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.garanti.cepsubesi']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae2-65a0-49d8-96e6-4a9a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:02.000Z",
            "modified": "2017-12-11T10:16:02.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.getingroup.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-2b60-4a47-9758-4839950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.htsu.hsbcpersonalbanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-1488-4f02-8aaf-47a9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.imb.banking2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-f2c0-4566-87bf-4594950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.infonow.bofa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-00c4-438f-b6ee-4805950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.ing.diba.mbbr2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-83f8-4ef6-85ad-4f4c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.ing.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-37c0-45ea-8598-4704950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.konylabs.capitalone']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-2df0-45cd-8eb3-45f0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.mobileloft.alpha.droid']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-f928-4ddf-a0c4-4e63950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.moneybookers.skrillpayments']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-7078-4e85-ba82-4329950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.moneybookers.skrillpayments.neteller']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-d120-4f42-946a-4a78950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.pozitron.iscep']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-9c24-4a91-8769-43e6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.rak']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-85e8-45e6-b20f-47a6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.rsi']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-0220-4645-b676-49ef950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.sbi.SBIFreedomPlus']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-4378-4a54-ad7e-4a37950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.snapwork.hdfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-4480-43c6-9c92-4f9a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.starfinanz.smob.android.sfinanzstatus']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-03a0-4e1c-b571-4d95950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.suntrust.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-d66c-4c4c-87bd-4f8e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.targo_prod.bad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-bc9c-406e-9365-4fe1950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.tmobtech.halkbank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-1cc8-4d9a-959c-48c1950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.unicredit']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-ae98-4d6a-b71d-4f5d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.usaa.mobile.android.usaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-f75c-4330-9c52-48cf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.usbank.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-3788-43c3-9e47-4d31950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.vakifbank.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-eeb4-4edc-9b65-4dcf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.vipera.ts.starter.FGB']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-7850-4936-944d-46ae950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.vipera.ts.starter.MashreqAE']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-8d44-4d96-a29a-443e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.wf.wellsfargomobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-4e10-4ce2-a8d8-4d88950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.ziraat.ziraatmobil']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-d1d0-4186-9494-4d9c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'cz.csob.smartbanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-eeb0-407c-923c-4484950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'cz.sberbankcz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-7ac8-407b-8cd4-48d6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.commerzbanking.mobil']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-edfc-4a18-9f84-4bfe950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.direkt1822.banking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-6044-40dc-81f1-4773950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.dkb.portalapp']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-fe78-45d2-ace9-4f3c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.fiducia.smartphone.android.banking.vr']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-e0b8-4bc0-9bdc-417d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.postbank.finanzassistent']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-b624-413a-9836-445c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'enbd.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-c7f4-45d7-bcbd-4fe3950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'es.bancosantander.apps']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae3-1588-415e-9439-4ac6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:03.000Z",
            "modified": "2017-12-11T10:16:03.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'es.ibercaja.ibercajaapp']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae4-1bac-4e5b-974e-45e4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:04.000Z",
            "modified": "2017-12-11T10:16:04.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'es.lacaixa.mobile.android.newwapicon']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae4-39ec-4ecb-abd1-4c76950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:04.000Z",
            "modified": "2017-12-11T10:16:04.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'es.univia.unicajamovil']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae5-67b0-4cce-a3c4-4e62950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:05.000Z",
            "modified": "2017-12-11T10:16:05.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'eu.eleader.mobilebanking.pekao']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae6-8e98-4fd6-9ab8-4ed5950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:06.000Z",
            "modified": "2017-12-11T10:16:06.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'eu.eleader.mobilebanking.pekao.firm']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae7-e7b0-41e7-94ae-4175950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:07.000Z",
            "modified": "2017-12-11T10:16:07.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'eu.inmite.prj.kb.mobilbank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae7-57ec-4dc2-9124-4840950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:07.000Z",
            "modified": "2017-12-11T10:16:07.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'eu.unicreditgroup.hvbapptan']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae8-9188-429a-82b3-4804950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:08.000Z",
            "modified": "2017-12-11T10:16:08.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'fr.banquepopulaire.cyberplus']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae9-79f8-4724-bffd-49a9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:09.000Z",
            "modified": "2017-12-11T10:16:09.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'fr.creditagricole.androidapp']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5ae9-0bc0-4ea8-9d2b-4a9b950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:09.000Z",
            "modified": "2017-12-11T10:16:09.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'fr.laposte.lapostemobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aea-1b54-41a5-abec-4c68950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:10.000Z",
            "modified": "2017-12-11T10:16:10.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'fr.lcl.android.customerarea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aeb-b328-4c61-a0b3-4c94950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:11.000Z",
            "modified": "2017-12-11T10:16:11.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'gr.winbank.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aec-e9a8-4fe4-8785-47e9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:12.000Z",
            "modified": "2017-12-11T10:16:12.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'in.co.bankofbaroda.mpassbook']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aec-62bc-4ca4-bb67-4faf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:12.000Z",
            "modified": "2017-12-11T10:16:12.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'mbanking.NBG']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aed-9684-4d20-8b38-4150950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:13.000Z",
            "modified": "2017-12-11T10:16:13.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'mobi.societegenerale.mobile.lappli']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aee-cf24-4faa-a625-4470950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:14.000Z",
            "modified": "2017-12-11T10:16:14.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'net.bnpparibas.mescomptes']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5aef-3270-4030-ac83-4d05950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:15.000Z",
            "modified": "2017-12-11T10:16:15.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'nz.co.anz.android.mobilebanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af0-41e0-4368-b4ac-4b35950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:16.000Z",
            "modified": "2017-12-11T10:16:16.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'nz.co.asb.asbmobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af0-746c-4f9a-8766-4d01950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:16.000Z",
            "modified": "2017-12-11T10:16:16.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'nz.co.bnz.droidbanking']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af1-c4a0-447e-8a4d-4c6a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:17.000Z",
            "modified": "2017-12-11T10:16:17.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'nz.co.kiwibank.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af2-de68-4596-9ded-46a2950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:18.000Z",
            "modified": "2017-12-11T10:16:18.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'nz.co.westpac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af2-01c4-4a68-b32d-4888950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:18.000Z",
            "modified": "2017-12-11T10:16:18.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pl.bzwbk.bzwbk24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af3-65f4-47ee-ad2f-418f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:19.000Z",
            "modified": "2017-12-11T10:16:19.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pl.bzwbk.ibiznes24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af4-7724-4179-94ab-47de950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:20.000Z",
            "modified": "2017-12-11T10:16:20.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pl.ipko.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af5-9628-46f9-b013-4b38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:21.000Z",
            "modified": "2017-12-11T10:16:21.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pl.mbank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af5-01b8-48ca-8869-4c40950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:21.000Z",
            "modified": "2017-12-11T10:16:21.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pt.bancobpi.mobile.fiabilizacao']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af6-50cc-4c5f-a6ad-4218950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:22.000Z",
            "modified": "2017-12-11T10:16:22.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pt.cgd.caixadirecta']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af7-ca84-462b-baa4-4751950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:23.000Z",
            "modified": "2017-12-11T10:16:23.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'pt.novobanco.nbapp']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af7-54a4-400a-8aad-4f3e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:23.000Z",
            "modified": "2017-12-11T10:16:23.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'ro.btrl.mobile']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af7-e948-4725-8c04-4ec5950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:23.000Z",
            "modified": "2017-12-11T10:16:23.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'src.com.idbi']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af7-3f08-43f4-a2ec-4094950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:23.000Z",
            "modified": "2017-12-11T10:16:23.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'wit.android.bcpBankingApp.activoBank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af7-4170-401c-8d82-4372950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:23.000Z",
            "modified": "2017-12-11T10:16:23.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'wit.android.bcpBankingApp.millennium']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af8-adf0-4860-b44d-497e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:24.000Z",
            "modified": "2017-12-11T10:16:24.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'wit.android.bcpBankingApp.millenniumPL']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5af8-8780-4a86-972f-4a4d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:16:24.000Z",
            "modified": "2017-12-11T10:16:24.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'www.ingdirect.nativeframe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3b-e6e4-4cbc-92c2-4960950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:31.000Z",
            "modified": "2017-12-11T10:17:31.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'au.com.ingdirect.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3b-0694-4e08-9443-4200950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:31.000Z",
            "modified": "2017-12-11T10:17:31.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'ch.raiffeisen.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3c-5398-4444-bca0-43ab950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:32.000Z",
            "modified": "2017-12-11T10:17:32.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.adcb.bank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3d-1fec-478b-8888-4256950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:33.000Z",
            "modified": "2017-12-11T10:17:33.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.dib.app']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3e-2ebc-4707-831a-4a9b950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:34.000Z",
            "modified": "2017-12-11T10:17:34.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.cibc.android.mobi']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3f-5f10-4f2b-9c4e-42a7950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:35.000Z",
            "modified": "2017-12-11T10:17:35.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.chase.sig.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b3f-1dd8-4931-87eb-4170950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:35.000Z",
            "modified": "2017-12-11T10:17:35.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.commbank.netbank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b40-7818-4a54-8c34-419e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:36.000Z",
            "modified": "2017-12-11T10:17:36.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.comarch.mobile.banking.bnpparibas']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b41-58e8-431d-9992-4a08950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:37.000Z",
            "modified": "2017-12-11T10:17:37.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.citibank.mobile.au']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b41-b7a0-4e77-81d2-4acb950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:37.000Z",
            "modified": "2017-12-11T10:17:37.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.finanteq.finance.ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b42-2ea4-4b59-9399-4519950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:38.000Z",
            "modified": "2017-12-11T10:17:38.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'hr.asseco.android.jimba.mUCI.ro']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b43-ea74-4c30-82fc-45fa950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:39.000Z",
            "modified": "2017-12-11T10:17:39.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.unionbank.ecommerce.mobile.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b44-0c6c-4ff7-bcf1-413c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:40.000Z",
            "modified": "2017-12-11T10:17:40.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.scb.breezebanking.hk']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b44-4d10-472f-b727-4b49950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:40.000Z",
            "modified": "2017-12-11T10:17:40.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'cz.airbank.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b45-f8f0-4a54-93e9-4da5950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:41.000Z",
            "modified": "2017-12-11T10:17:41.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.ykb.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b46-91e0-4d3a-96a5-4560950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:42.000Z",
            "modified": "2017-12-11T10:17:42.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.ubs.swidKXJ.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b47-bf64-40bc-8680-403f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:43.000Z",
            "modified": "2017-12-11T10:17:43.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.comdirect.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b47-3de0-44d2-bd0a-42fa950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:43.000Z",
            "modified": "2017-12-11T10:17:43.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'es.cm.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b48-91c4-4f5e-b936-48b8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:44.000Z",
            "modified": "2017-12-11T10:17:44.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'may.maybank.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b49-9098-409e-bae6-4240950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:45.000Z",
            "modified": "2017-12-11T10:17:45.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'de.sdvrz.ihb.mobile.app']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4a-98e8-4880-be1d-4edc950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:46.000Z",
            "modified": "2017-12-11T10:17:46.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'mobile.santander.de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4a-edbc-486e-bcb9-42d4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:46.000Z",
            "modified": "2017-12-11T10:17:46.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'com.palatine.android.mobilebanking.prod']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4b-7d78-458d-b10a-4941950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:47.000Z",
            "modified": "2017-12-11T10:17:47.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'org.stgeorge.bank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4c-b294-4ed8-ad6c-47a4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:48.000Z",
            "modified": "2017-12-11T10:17:48.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'org.banksa.bank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4d-39b4-4b7a-8afd-49f8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:49.000Z",
            "modified": "2017-12-11T10:17:49.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'net.inverline.bancosabadell.officelocator.android']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4d-bcf8-4001-8c50-49cf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:49.000Z",
            "modified": "2017-12-11T10:17:49.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'org.westpac.bank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5a2e5b4e-fb38-4378-b8c5-4987950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:17:50.000Z",
            "modified": "2017-12-11T10:17:50.000Z",
            "description": "Targeted Apps",
            "pattern": "[file:name = 'org.bom.bank']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2017-12-11T10:17:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:49:54.000Z",
            "modified": "2017-12-11T10:49:54.000Z",
            "first_observed": "2017-12-11T10:49:54Z",
            "last_observed": "2017-12-11T10:49:54Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
                "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
            "name": "Section1Chart1.jpg",
            "content_ref": "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e5fe4-3534-4b44-af7c-4c01950d210f",
            "payload_bin": "/9j/4AAQSkZJRgABAQEAkACQAAD/4RD6RXhpZgAATU0AKgAAAAgABAE7AAIAAAAQAAAISodpAAQAAAABAAAIWpydAAEAAAAgAAAQ0uocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEVtcGV5IENoYXJsb3R0ZQAABZADAAIAAAAUAAAQqJAEAAIAAAAUAAAQvJKRAAIAAAADOTMAAJKSAAIAAAADOTMAAOocAAcAAAgMAAAInAAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e60cd-1968-41fc-98db-4df5950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:51:39.000Z",
            "modified": "2017-12-11T10:51:39.000Z",
            "first_observed": "2017-12-11T10:51:39Z",
            "last_observed": "2017-12-11T10:51:39Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e60cd-1968-41fc-98db-4df5950d210f",
                "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e60cd-1968-41fc-98db-4df5950d210f",
            "name": "Section1Chart2.jpg",
            "content_ref": "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e60cd-1968-41fc-98db-4df5950d210f",
            "payload_bin": "/9j/4AAQSkZJRgABAgAAAQABAAD/2wBDAAIBAQEBAQIBAQECAgICAgQDAgICAgUEBAMEBgUGBgYFBgYGBwkIBgcJBwYGCAsICQoKCgoKBggLDAsKDAkKCgr/2wBDAQICAgICAgUDAwUKBwYHCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgr/wgARCAB2A7IDASIAAhEBAxEB/8QAHAABAAMBAQEBAQAAAAAAAAAAAAYHCAUEAwIB/8QAGQEBAQEBAQEAAAAAAAAAAAAAAAECAwQF/9oADAMBAAIQAxAAAAHTfCaAM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/x7UOfw0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz/HdRZ+P60AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM/tADP7QAz+0AM2LSEAaAGf2gBn9oAZ/aAGf2gBn/u3Hn80ADP8AoDP+gAAAAAAAAAACouVxq0NS86l/sXDHq/7JI+xSH3NBzWoLfAAAAAAAAAGf9AZ/NAApCT1V6S9/jk+0ie9vIvSNa/zO1Wm3K8jfrLC9uYPMav8AhRkJNY9zKdtlrZ+0Dn40CAAAABT1r0aWF1s1/AuawaDu8qWfZ/7hdUZgNcmsPpwueW8AAAACvgWCB5fVEiC/b5c8mtg1TawAz/oDP5oAGf8AQGbbRLBV8LBV8LBV8LBV8LBV8LBV8LBV8LBV8LBV8LBV8JB+44Jh8ooO/wAjzju/eNia+yvhYKvhYKvhYKvhYKvhYKvhYKvhYKvhYKvhYKvhYOf5/RxrJXwmHxiokXz4IkPm444HY+4knpiQlfM44k/4jYkHZgwsHP1gUcayV8LBV8LBV8LBV8LBV8LBi/GEy5PDEo6EHHU7MSEk6MKEq+0PFgq+Fgq+Fgq+Fgq+Fgq+BBBfivhYKvh1/wB8UdyS18LBV8LBz/P6uNJAzbaMA0AV8kEhK+S0RJMPyRFIfcRBLv4RJ35EV8kHqIq9XYI6kndK+SD7EZS/xEdTL7EHdf2EcWDDDwu39iPJBISvki9hEUt/REEj/BH0gkJXyXCIphzjgJH9SLpr7CvqO1ln8n6wRXywRXywRXywRXyYdEr5YIr5YIr5MOiV8mntK+o7WWfiwFgxw4KwY8R9PeIR1YPOIekPdIClvUK+SD+keSv9kRS3qFfJB2CDp7wyPO//AEj6VfIjT2TUr57PecRYIoNOwWDziHu/6SLplziPJZ/CKJh0Svqu0ln80ADP980NoAwxcfu6xwPzyrkKXrHVfnK1qLSnyK64V8foyloTyd8ojh359SKxC7/EQnh214ivuHb/ALzPkptH7lTSTr+wr2RyDzERhl5+Egn6sb2GdLl+/fKDm8olxn6TW56TP3TueJkc5dgew/kMkEqKt5F5QE/FHaY8ZHnY/h3oXYdeF/UjdWd89elHed9eXrkdhw3haO/GxGLlq/v5SCuZpF9JPG/58DiTfxeHLh62zdNNLrz/AHvRHX51tZS13Vq8qLT31lRw3XUDERsrtkArK8JMZ67Up6Jnm0+9IDOkttLtFE+bQcQPXD5B1SperOeyVTYvOHki8y75EoTcUIJZCbi8BzLcr2wivgWDmHT0EIDXtufM5Eg/vGKzsvu9QqvS0F7Z38/6Az+aABn+/wCgL5M/dyoO+T7pU95jRfjqHzk7k+fLYOvy5FVhLfxBvsXP5qW+pa/UouPmlYzVHXLZjfKk5FLKoIX1BI7dhH+TV38L99lMfctqwKRu4AAAAAAAAAZ/0Bn8v+t7JzUWT2c+RKXU3OgMJLusLKN9HdidKeldB8qmJyl7P6T8v0P4/oZ+0Dn6rtoi3stF9/qk5OdqU0l1i5orSvuNCwnkcYs6L9D2kl9VKdMl3rp7nFweytumWT8Ki7xpUAAAAAFfAsEFFfP1UoXvLM6T0k374clPbY1IXeM/6Az+aABn/QGXpCaAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAz+qA25UsaZ6zZCnP19Dpxv8Als4/cGMzXicVLOOpWS40Ez+6+LQDP40Az+NAZ+/tPG4WfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxoBn8aAZ/GgGfxP1HDWTP40Az+NAM/jQDP40Az+NAZ/R41CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//EAC0QAAEEAgICAAUEAwEBAQAAAAcABAUGAxcCGAE3CBARFRYgMEBIExRQEjhg/9oACAEBAAEFAiQSZ2lzmwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVWc1FamwewzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1Wwzqt0lf8o2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdVsM6qVKxkhIuKKxkm4vYZ1WwzqthnVbDOq2GdVsM6rYZ1WwzqthnVbDOq2GdUNyTO3ScRC96/wDS+KP0V/D/ALTf8AserRP6t/bHvvVEL3r/ABZchTvOzPjJjZUG+WnzSKfdbt+I1KLIcHJDhkR7BhebCu8lOTl5l20xSbZgucJ/E+KP0V8m5EIExIVIiRVir0LYYCyN2NqrEnI1W/xc/VZG51GIkJiwwNew4Z6DctIawwNjbk0rshlIWO28IDLI3OoxEhK2auwfn8xqXhxM2ms1xcOfDJxX9pv22hEsFk8Vm9Q9irTG01mSi7IYqFW+chMx8XC8i7aGkLxu3DIQHNv/ANYgThYZQhHuV1gKHE0S0/m1Q/aLHq0T+rfm4cYWmBoRbZOR2Uqt5CNp9zc2F7+ge+9UQvev8Wbb0GwXy5WScmg0YxiwiBfa5GxTxEGtlcUSerb/AIFCwy8UJ81Rgo2RkCAHZmTma9/E+KP0V8qXWLbLPrNAQA+i8rqcy2eHzCZvGCLw7gZS1zLJ/UKXyjsl8+kb5qFPieDUpkhs2flJ5zkKdcLXMsn9QqEaxliJ9ihmQH5NZJ6Vw40aR48X9pv2nePlnahKfiIkb3y2Or1FTkRxZK0xcLFU6yPWUdWnvOu1KkSMNzuxlbQDCjm5tEkm80SqWRjfx4BfTn7RY9Wif1b871FvJ2kD291TEM3xl8M6gNIFvG4/0D33qiF71/izdVrFk8c65AZId/HsZVm0iYyPcytYrc9zZDYdxjt1VKw8lZqvQFkbtmzdm3/ifFH6K+TNgwYKWhIieaMK5X4nnH1WsxMhzrde5xeWnVHPJ2+mzTzNRqTxr1dhq5Xq3hcRke7eO4iKkM+WnVHPJtYOFY5PNfgeUdM1as2NYsOPBjX9pv25WnVGedOmDN4zY1SsRsY+g4eVjsOHHgx8KPSsMr9tjvMm+gIOUyt2+Bm3YQ8VGN2Eeximf7RY9Wif1b+h7S6fIyU3T6nZskHVKvWPP6B771RVlYuDMm2BatsC1bYFq2wLVtgWrbAtW2BatsC1bYFq2wLVtgWrbAtW2BatsC1bYFq2wLVtgWrbAtW2BatsC1bYFq2wLVtgWrbAtW2BatsC1bYFq2wLVtgWrbAtW2BatsC1bYFq2wLVtgWrbAtW2Ba
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e611d-f250-46fc-a644-44bf950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:49:41.000Z",
            "modified": "2017-12-11T10:49:41.000Z",
            "first_observed": "2017-12-11T10:49:41Z",
            "last_observed": "2017-12-11T10:49:41Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e611d-f250-46fc-a644-44bf950d210f",
                "artifact--5a2e611d-f250-46fc-a644-44bf950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e611d-f250-46fc-a644-44bf950d210f",
            "name": "Section2Chart1.jpg",
            "content_ref": "artifact--5a2e611d-f250-46fc-a644-44bf950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e611d-f250-46fc-a644-44bf950d210f",
            "payload_bin": "/9j/4AAQSkZJRgABAQEAkACQAAD/4RD6RXhpZgAATU0AKgAAAAgABAE7AAIAAAAQAAAISodpAAQAAAABAAAIWpydAAEAAAAgAAAQ0uocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEVtcGV5IENoYXJsb3R0ZQAABZADAAIAAAAUAAAQqJAEAAIAAAAUAAAQvJKRAAIAAAADNjMAAJKSAAIAAAADNjMAAOocAAcAAAgMAAAInAAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e61e2-3a44-4ef1-b432-4183950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:50:14.000Z",
            "modified": "2017-12-11T10:50:14.000Z",
            "first_observed": "2017-12-11T10:50:14Z",
            "last_observed": "2017-12-11T10:50:14Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e61e2-3a44-4ef1-b432-4183950d210f",
                "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e61e2-3a44-4ef1-b432-4183950d210f",
            "name": "Section3.jpg",
            "content_ref": "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e61e2-3a44-4ef1-b432-4183950d210f",
            "payload_bin": "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
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e61ee-43c0-47f9-b246-45ac950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:51:47.000Z",
            "modified": "2017-12-11T10:51:47.000Z",
            "first_observed": "2017-12-11T10:51:47Z",
            "last_observed": "2017-12-11T10:51:47Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e61ee-43c0-47f9-b246-45ac950d210f",
                "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e61ee-43c0-47f9-b246-45ac950d210f",
            "name": "Section2Chart2.jpg",
            "content_ref": "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e61ee-43c0-47f9-b246-45ac950d210f",
            "payload_bin": "/9j/4AAQSkZJRgABAQEAkACQAAD/4RD6RXhpZgAATU0AKgAAAAgABAE7AAIAAAAQAAAISodpAAQAAAABAAAIWpydAAEAAAAgAAAQ0uocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEVtcGV5IENoYXJsb3R0ZQAABZADAAIAAAAUAAAQqJAEAAIAAAAUAAAQvJKRAAIAAAADMjIAAJKSAAIAAAADMjIAAOocAAcAAAgMAAAInAAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e628f-6938-4458-90b3-407b950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:52:10.000Z",
            "modified": "2017-12-11T10:52:10.000Z",
            "first_observed": "2017-12-11T10:52:10Z",
            "last_observed": "2017-12-11T10:52:10Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e628f-6938-4458-90b3-407b950d210f",
                "artifact--5a2e628f-6938-4458-90b3-407b950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e628f-6938-4458-90b3-407b950d210f",
            "name": "Section4ControlPanel.jpg",
            "content_ref": "artifact--5a2e628f-6938-4458-90b3-407b950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e628f-6938-4458-90b3-407b950d210f",
            "payload_bin": "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
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--5a2e62a1-b19c-42b7-b19f-4355950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2017-12-11T10:51:57.000Z",
            "modified": "2017-12-11T10:51:57.000Z",
            "first_observed": "2017-12-11T10:51:57Z",
            "last_observed": "2017-12-11T10:51:57Z",
            "number_observed": 1,
            "object_refs": [
                "file--5a2e62a1-b19c-42b7-b19f-4355950d210f",
                "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
            ],
            "labels": [
                "misp:type=\"attachment\"",
                "misp:category=\"External analysis\"",
                "workflow:state=\"incomplete\""
            ]
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a2e62a1-b19c-42b7-b19f-4355950d210f",
            "name": "Section4Hosts.jpg",
            "content_ref": "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f"
        },
        {
            "type": "artifact",
            "spec_version": "2.1",
            "id": "artifact--5a2e62a1-b19c-42b7-b19f-4355950d210f",
            "payload_bin": "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
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}